<
E.NLLG.MA
EUROPEAN NUMBERS INFORMATION GATHERING &
MONITORING ASSOCIATION
ISSUE 1 3
SEARCHER AGENT
E-RJITF
£ DNISi
PART 2
( MESSAGE COMPOSITION
OUR ADDRESS : IS ENIGMA NEWSLETTER
17-21, GHAPEL STREET.
BRADFORD, WEST YORKSHIRE,
BD1 5DT, ENGLAND
VIA FACSIMILE : »
UK:
OVERSEAS: +44
01274-779004
274-779004
Welcome to issue 13 of the E .N. I .G.M . A . Newsletter .
ENIGMA is the journal of the European Numbers Information Gathering
and Monitoring Association.
ENIGMA is a non-profit making association of listeners who monitor and
gather information on 'Number Stations' and other related radio
transmissions. ENIGMA aims to bring together listeners and enthusiasts
and provide quality information on subjects not normally available
from main-stream publications.
#*:Mc************************»*****^*^*******************************
Subscriptions
4 Copies of ENIGMA - are available for £6.00 sterling - includes
postage for the UNITED KINGDOM.
4 Copies of ENIGMA - are available for £10.00 sterling - includes
airmail postage for REST OF THE WORLD.
You may pay by Sterling Cash, US Dollars, Eurocheques or American
Express cheques ( in Sterling ) or by UK Cheques or Postal Orders
payable to ENIGMA.
***)Mc***3M:*****************************#******************************
Contributions.
We appreciate all contributions to the newsletter ( including
anonymous information). We regret that we are not always able to
provide a personal reply but, rest assured, we read and collate all
information for present and future use. Questions are answered via our
" Letters to ENIGMA " pages. ENIGMA is also a discussion forum and we
welcome comments about the newsletter. If you are interested in
writing ; ■-§. feature please contact us at the mailing address.
*#*»»*»»»*»»♦»**♦***»**»******«************»*************************
ActoowlgdgsmenLjs.
Information in ENIGMA may be reproduced, but please mention ENIGMA and
if possible the originator of the article, we would appreciate any
cutting s in which ENIGMA is mentioned.
**********************************************************************
K 3 YT ISSUE . . . We aim to publish the next issue of ENIGMA in mid -
January 1998.
Contributions would be appreciated by FR I D A Y 2 8th NOVEMB E R 1 98? ..
ENIGMA WANTS TO HEAR FROM YOU (DON'T BE A SLEEPER)!
**********************************************************************
COYER ISSUE 13
Intelligence Training Centre.
(Anon) .
VOICE STATION HEMS AND LATEST LISTENING - Melcome to issue 13 and
thank you for all your con clippings A news.
ALL TIMES ARE UTC - ALL IDs ARE 1997 REPORTS - FREQUENCIES ARE IN kHz.
ENGLISH LANGUAGE STATIONS (Other active stations: // direct equivalent
/ family member
El) READY READY - Mode AM //M17
Transmissions repeat on two frequencies at 20 minute intervals.
A different cycle period is in us© for different IDs - IDs are regular
and operate on a week of month basis. Me have included summer & winter
information where known. IDs not given due to lack of monitoring.
MONDAY
WINTER
SUMMER
TUESDAY
WINTER
SUMMER
WEDNESDAY
SINTER
SUMMER
20.00 4740
20.20 3410
20.40 3810
19.00 4740
19.20 3410
18.40 3910
19.00 4740
19.20 3910
19.40 34 1G
18.00 4740
18.20 3910
16.40 3410
23.00 5235
23.20 4740
23.40 4460
22.00 6930
22.20 6875
22.40 5695
MONDAY
WINTER
SUMMER
WEDNESDAY
WINTER
SUMMER
SATURDAY
WINTER
SUMMER
21.30 4740
21.50 4460
22.10 4270
20.30 6290
20.50 5865
21.10 5235
19.00 4740
19.20 3910
19.40 3410
18.00 4740
18.20 3910
18.40 3410
21.30 4740
21.50 4460
22.10 4270
?
E3) LINCOLNSHIRE POACHER - Mode USB //E4
For full details please see part 1 of our special feature in this
issue .
E4) CHERRY RIFE - Mode USB //E3
Transmissions appear to be MON to FRI only at time of writing, recent
events in Asia may result in extra traffic from this station.
10.00
11.00
12.00
13.00
14.00
21.00
22.00
23.00
17499
14871
13866
14469
13866
9263
13866
11570
8320
13866
11570
7484
11570
8320
?????
9263
?????
?????
82S3
?????
?????
17499
20474
?????
MI6 will be pleased with reports from Japan and South Korea which
inform us at ENIGMA that the signal is very strong.
Transmissions follow Lincolnshire Poacher format starting on the hour
for 45 minutes.
Unconfirmed frequencies included; 13440 15616 & 16104. Frequencies
previously used include; 4768 18684 19844 A 23411 all of which may be
worth trying at any time. Special thanks to Dave in South Korea.
COVER - Front cover of a US Intelligence agent’s training guide on message composition
(source anonymous)
3
E5) COUNTING STATIONS - Mode AM (bom now USB) //V5
* %
Still very active in English language. Signals in Western Euro&e are
generally weak at present although reports from Greece indicate better
reception. Some transmissions are now in USB. Please see part 1 of our
feature in this issue.
Following based on reports received since last issue. Special thanks
to Peter in SW. Some logs are from USA. Schedules are short lived and prone
to sudden changes. Will move to lower frequencies for Winter months.
// Frequencies shown where known. (*) Hot same message.
MOH
01.00
4845 *
WED
05.00
7473
FRI
15.00
10587
MOM
01.00
4670 *
MED
12.00
10597//7600
FRI
17.00
13450//12187
MOW
07.00
12175//10191
WED
15.00
9274// 7600
FRI
18.00
14448// 12 197
MOH
11.00
16086// 10597
WKD
16.00
10529//9070
FRI
20.00
12 197// 10527
MOH
17.00
12197//11481
WED
17.00
13874// 11491
fRl
>$oo
£i43
MOH
18.00
12175//1Q727
WED
19.00
13450//12197
SAT
05.00
9090//9074
MOH
20.00
11584//8085
WED
20.00
11564//8Q85
SAT
07.00
12175//10191
WED
21.00
11526
SAT
11.00
10597
TUE
01.00
4670 *
SAT
12.00
10223
TUB
01.00
4645 *
THU
17.00
13450// 12 197
SAT
13.00
10529
TUI
02.00
7425//7709*
THU
18.00
14364//12175
SAT
16.00
10529
TUE
02.00
7645 *
THU
18.00
14448// 12 187
SAT
17.00
13450
TUE
13.00
11491
THU
20.00
11564//8085
SAT
18.00
12175//10727
TUE
15.00
11491
THU
21.00
8030 //7585*
SAT
18.00
13450//12197
TUE
17.00
11481//13874
THU
21.00
8143 *
SAT
18.00
8125// (6891
TUE
19.00
13444// 12 175
SAT
21.00
12 175// 11072
TUE
21.00
12175//11072
More transmissions moving to USB
mode.
SUH
01.00
4670 *
SUH
15.00
8014
SUN
19.00
12175//13444
SUH
01.00
4645 *
SUH
16.00
9070
SUN
20.00
12187//10527
SUH
07.00
12175//1Q191
SUH
17.00
13450//12197
SUH
21.00
12150//11526
SUH
12.00
10587
SUN
18.00
14364// 12 175
Transmissions noted at 09.00 TUB 6967 started before 09.00 ending at
09.15 with 056 call followed by repeat of call at 09.27 ft count 186 at
09.37. THU at 08.00 12198 USB started before 08.00 ending at 08.15.
EG ft E7) ENGLISH HBH, 00000' ft '000 000', Mode AM //S6 ft 57 Families
Traffic levels continue to be high. Due to frequency usage it is not
practical to reproduce all logs. IDs noted, however, are listed below.
See G6 ft G7 for further details.
E6) 105 194 204 206 274 295 320 394 406 476 614 629 695 715 738 817
851 915 948
E7) 172 825 919
E9) MAGHETIC FIELDS Mode AM //V8
M0H 18.00 SUMMER or 18.00 WIHTER on 6645
SAT 08.20 SUMMER or 09.20 WIHTER on 11290
r,
. . ' . 4 *
Joint in flferby tells us that there seen to he two transnissions each
aonth. The first one is on the first Saturday of the month and the
second is on the third Saturday unless it is a aonth with
f ourSaturdays . In this case, the transmission is on the last Saturday
of the month. I wonder if this applies to the Monday schedule!
Comments and observations please.
Modulation level is too low and, therefore despite a strong signal,
the reception is not always readable. See also sister station V8.
BiO) PHOMBTIC ALPHABET -HATO Style. Mode AM/
Still very active indeed.
All information shown below is based on reports received since last
issue. Some frequencies share call-signs.
2270 JSR 2626 FTJ 2743 ULX 2844 YHF 2953 VLB 3090 CIO 3150 PCD
3270 KPA 3417 ART 3640 VLB 3840 YHF 4165 CIO 4270 PCD 4360 CIO
4463 FTJ 4604 R0V 4665 VLB 4780 SPA 4880 ULX 5081 JSR 5170 BZI
5230 SYH 5339 TMS 5437 ART 5530 MIN 5630 SYN 5820 YHF 6370 KPA
6500 PCD 6598 HDP 6658 CIO 6745 HIM 6840 BZI 7445 HIW 7605 SYH
7918 YHF 8464 SYH 8641 SPA 9130 BZI
10352 SYH 10970 MIW 11565 EZI 12950 SYH 13533 BZI 14750 SYH
15980 EZI 17170 SYH 17410 EZI 19715 EZI
Hew call R0V has been active on 4604 - for further E10 details see
part 2 of our feature in this issue. Also Simon Mason column for
recent message strings. Rob who was on holiday in Greece reported
consistent good signals at all hours - both voice types.
EH) “OBLIQUE" Mode AM/SSB //S12//G11//M3/K20
Ho reports received but probably about - most transmissions are of 5
minutes duration - messages rare.
All reports of this family very welcome.
E12 N H H Mode AM /M2
Mo changes to this station. Still active with excellent signal in
Europe at following schedule.
M0H 04.00 4573 WED 04.00 4573 THU 04.00 5821 FRI 04.00 4573
MOH 21.00 4644 WED 21.00 4644 THU 20.00 5821 FRI 21.00 4644
E15 PH0HETIC ALPHABET - pre HATO style Mode AM/SSB
11.00
18000
BEC
17.00
14000
FYS
All listed have been
12.00
17503
WSU
17.30
5834
MSA
heard since last
12.30
11170
MSA
18.00
5834
USP
issue - reception is
13.00
11000
BEC
19.00
4130
SAR
poor in U.K.
14.00
14000
FYP
20.00
5530
HAS
16.30
6715
HAS
21.00
4130
MSA
I would be interested in any traffic analysis from this station -
which is reported to be strong around Greece.
E16) TWO LETTER (EHGLISH) Mode SSB //G18
5 "
"73
Stations* AU - Alpha Uniform has different habits to other stations in
this set up. Mated recently on & Tuesday afternoon using:
4888//4821 13.00 Message for 865
13.30 M M ???
14.00 " " 194
14.30 M “ 720
6370 Also noted in use.
MD - Mike Delta is still active
15.00 Messages for 095 A 463
15.30 " 385 & 554
Heard July 31st at 15.00 & 15.30
messages for 681/865 - 70 Groups
again using 4821//4888 ep ^ lb
along with new call FR - Foxtrot
Romeo. More detailed information in Simon Mason's column - this issue.
E17 ENGLISH LADY, 00000' ENDING, Mode AM, Probably S6 family.
Not easy to find. Heard at the strangest of times. Reports received
since last issue.
WED 03.30 Freq unknown calling 501 THU 20.00 10710 calling 874
SUN 03.15 9195 calling 300
Reports always say good signal heard in North America; this may
suggest that the signal is relayed by the C.I.S. via Cuba to English
speaking N. A. agents.
118) RE “-ACTIVATION (SIMON MASON'S “FIFE FREE") MODE LSB //G22//S4//M13
'EDNA SEDNITZER' ENGLISH VERSION
This station was last noted in the English language on 8072 kHz at
20.00 on 3 September, 1989. It has a German voice arm G22 and an
unknown Slavic language arm S4 "Edna Sednit&er", neither of which have
been heard for some years. The station is operated by the agency
behind the much larger and more active 'slow Morse' station M13-
It may be an educated guess that most of its agents have learnt Morse
but a few still rely on voice transmissions. Even more worrying is the
use of English which suggests that the agents may well be in the U.K.
The format consists of the a 5 minute repeated ID 'Number' 3 Figure
'Group' £.g. 017
Message is sent in single 5f groups. Repeat sequence consists of call
sent four times and number & group given again. Message is sent again
in single 5f groups ending (pause) '000'.
The 'Number' used is an incremental message identifier, so moves up
with each new message. If probably changes each month, as with M13.
Its less than pure LSB mode and slow delivery make the station both
difficult to find and difficult to resolve. At the end of most
transmissions it is worth staying tuned - what sounds like a hand-set
being replaced can be heard. It is almost as if the recorded messages
are sent over a radio -telephone circuit!
So far transmissions we have found are;
2nd MED of the month 8025
3rd THU of the month 7455
2nd THU of the month 8025
3rd FRI of the month 7575
21.00 calling 307
05.00 calling 718
21.00 calling 307
08.00 calling 718
$
(repeat of WED)
* This was noted with a garbed delivery and wrong ser.No (the first
transmission noted may have been a test).
The frequencies used will change each new month along with the
message. Thanks to Mike in Kent for spotting the 307 transmissions.
See Also
6
flKBMAH LAHtHIAflE
Cr2) SWEDISH RHAPSODY Mode AM/SSB // M4
The details below represent recent logs only and is not a complete
schedule. THE SCHEDULE STARTS OH THE 1st SATURDAY OF EACH MOUTH
WEEK HUMBERS (5 Continues into
next month)
DAY
TIME
FREQUEHCY
&
1
2
3
4
VARIANT
SAT
09.00
8188 SSB
*3
*3
*3
SAT
12.00
6507 SSB
*3
SAT
22.00
3825 SSB
&3
*3
SAT
22.30
3825 SSB
*3
SUM
00.00
5748
*
SUM
00.30
5340 ^
*
SDH
09.00
7250 *AM
SUH
10.00
8188 SSB
#3
*3
#3
#3
SUH
11.00
8188 SSB
♦3
*3
*3
SUH
12.00
8507 SSB
#3
*3
#3
SUH
20.00
3823 SSB
*3
*3
*3
#3
SUH
21.00
5340
*1
SUH
21.30
4832 AM
A
#1
SUH
22.00
3823 SSB
SUH
22.30
3823 SSB
m
HOH
13.00
6200 AM
A
*1
MOH
17.00
5748 AM
A
*1
MOM
17.30
5748 AM
A
*i
HOH
19.00
5340
*3
MOH
20.00
5340 MCW
M 4
*1
MOH
22.00
5748 AM
A
*x
MOH
22.00
@507 AM
A
*i
MOH
22.30
5748 AM
A
HOH
23.00
5748 AM
A
*i
*i
MOI
23.30
5748 AM
A
*i
TUE
18.00
4195 MCW
M4
TUB
20.00
4195 MCW
M4
*1
TUE
21.00
3823 MCW
M4
*1
3 ‘
TUE
23.00
3825 SSB
*3
#3
£3
WED
09.00
4195 MCW
M4
*1
WED
13.00
8200 AM
A
*1
WED
17.00
5748 AM
A
*1
#1
WED
17.30
5748 AM
A
*1
WED
20.00
5340 AM
*
*
WED
22.00
5748 AM
A
*1
WED
22.30
5748 AM
A
*1
*1
WED
23.00
5748 AM
A
*1
WED
23.30
5748 AM
A
*1
THU
18.00
4195 SSB
*3
THU
19.00
5340 MCW
M 4
THU
20.00
5340 AM
♦3
*3
*3
THU
21.00
5340 AM
*3
*3
♦3
THU
22.00
5340 AM
*3
*3
*3
THU
23.00
3825 SSB
*
7
More transmissions now in SSB. Rs-introduction of 6507 kHz. Thanksf^o
Phil for the information concerning 7250 kHz. See HK 5 SUM.
Important note :
Transmissions currently on 7314 will move to 6200 for winter.
Transmissions currently on 6200 will move to 5748 for winter.
Please send in all logs of this station. Remember Meek 1 starts on the
first Saturday of each month. Rote also that no transmissions take
place on Friday. Be still need a dedicated monitor for this station to
conduct systematic monitoring and work on the stations habits.
Be are still carrying out investigations into the UUUU L0L0-MCH
marker. Further information next issue.
G4) 3-HOTB ODDITY - Mode AM //M29 ( 1 Hour later in winter).
SUNDAY - APRIL 20.05 3936 MAY 4245 JUNE 4376 JULY 3930 aUG 393*'* .
SUNDAY - APRIL 20.35 3836 MAY 4145 JUNE 4276 JULY 3830
GROUPS - 23 25 30 25 ADG 3834
Also noted in JULY at 13.30 each MON & BED on 5223. See also M29-YDE.
G8) GERMAN LADY '00000' ENDING Mode AM//S6 Family
Sends all messages using PAIRED groups . Uses regular time slots but
seemingly random frequencies. Messages are repeated on a different
frequency following first airing. Schedule is ID-specific & well-organised.
MON 19.00 A 20.00 Frequencies range between 4 Mhz & 11 Mbs.
TUI 19.00 & 20.00
SUM 07.00 A ?
SUN 18.00 A 20.00 Id's include 458 A 894
G7) GERMAN LADY '000 000 ENDS' ENDING Mode AM //S7 Family
Sends all messages using SINGLE groups, uses 3F or 4F decode key. Each
transmission is repeated on 2 further frequencies. Nil messages are
repeated only once. Frequencies and ID's are changed each month on
some networks .
Recent logs include:
THU 06.30 (05.30 summ) FRI 06.00 (05.00 summ) SAT 09.00 (08.00 Summ)
THU 19.00 (18.00 summ) FRI 19.00 (18.00 summ)
6727
The FRI transmission is the same message as the SAT one but with
different ID.
A once monthly transmission at 08.00 (07.00 in summer) has also been
noted on the 2nd or 3rd SUN of each month.
ID s heard over last six months include: 052 118 124 146 164 218 224
241 306 311 419 421 464 577 621 & 696.
Gil) STRICT Mode AM //E11//S12//H3/H20
Regular slots, but changes frequency without warning.
*These msgs also sent Sun 0405 & 0435 Aug freqs: 3819 & 3919 (27 Groups)
4
WEEKLY u THE 21.00 3823 4015 4780 or 5050 Calling 752
WEEKLY WED 08.00 6430 or 7840 Calling 752
We had one report of '697' at 23.00 but the day/date was not given .
Special ID '121' has again been active - this tine in German. The ID
'121' usually reserved for Morse (M3). Noted possibly daily for a
short period at 05.00 on 7790, the ID differs in that it always sends
a message and the messages are of widely variable group counts.
Different message each time.
G16) GERMAN TWO LETTER ST AT 108 S Mode SSB/AM //H16
Please see ''Simon Mason Writes" for all the latest news on this
station.
GK is the most active call and can be heard at 18/19.30 20/20.30 6
21/21.30 depending on the day of the week.
Frequencies are selected from the following list ; 2690 270? 2745
3228 3262 4543 4594 4821 4888 5015 5182 5732 5770 6370 8765 6853 7404
7532 7661 7752 7858 8063 8173 9040 9325 9450
10170 10460 10500 10740 11108 11545 11617 12092 12210 12314 13362
13752 13775 13890 14622 14945 15610 16055 16620 16414 17430 18195
18575 18295 19755 20240 20350 2Q875 22885
Callsigns active in German are; GK WL
Callsigns active in English are: AU MD FR DL
A recent press report by Deborah Collcutt; “Kremlin spies break Cold
War record* gave a direct reference to number stations . Writing about
the latest German government report - ’Germany attracts sore agents
than any other European country and experts estimate that the number
of Russian spies probably stretches into thousands.
Previously they were mainly engaged in observing and monitoring
military developments, now they are interested in German
telecommunications technology and the computers we use, ' a spokesman
said. Other fields of interest are NATO's eastward expansion, Bonn's
Eastern-bloc policy and its role in the Middle East peace process.
The report claims that Moscow is the centre of the spying operation
and that all agents are recruited, rigorously trained, dispatched and
monitored from there. German intelligence officers believe that
personal contact is kept to a minimum and that the moles receive their
information and orders through coded shortwave radio messages.
But in Moscow its a different story, the Russians are trying to
encourage defections and have set up a special telephone line. Will
Stewart reports in The Express newspaper. Russians recruited by rival
spy organisations would be pardoned and allowed to keep their foreign
earnings if they agree in future to pass false information to their
handlers.
Calls to the hotline - Moscow 224 0035 (don't try this at home) were
jammed on its first day of operation as espionage turned into farce.
The woman taking the calls admitted most were from 'mentally ill
people' .
Other callers were journalists, she said, adding that no-one had
called her from MI6 and wished to change sides.
SB) & S7) RUSSIAN MEN , 00000 ' & 'OOP OOP ' ENDING, Mode AM
See G6 & G7 for further details.
56) Family : K6//E177//G6//V6//H 14/S25
57) Family : E7//G7//V7//H12
No major changes. Still very active on a wide range of frequencies.
Schedules can be very protracted, tailored to requirements of
individual addressees and frequency usage and ID s prone to sudden
change .
56) ID s noted: 382 386 482 6P4 796 826 831 895
57) ID s noted: 108 131 147 638 813 864
58) POLISH COUNTING . Mode AM - RE-ACTIVATION
This has not been heard for some time. Consists of live' Polish
Counting Man.
TUB 04.20 to 04.25 4828 'Raz' = 1 (with phrase)
MED 05.30 to 05.35 4788 'Raz' = 1 (with phrase)
S10C) CZECH LADY - Mode AM - RE-ACTIVATION
This station which is a varient of S10, the old (incorrectly- titled)
Bulgarian Betty has lived on in voice as the S17 Czech Lady control'
since she ceased sending full messages in late 1890.
The station has been re-activated by its masters and Betty lives
again. First noted on June 11th.
WEEKLY - TUB 06.30 4858 'calls 555' for 5 minutes interspersed
- WED 06.30 4958 with the agent ID numbers and group
counts of the two messages to follow.
IDs heard so far 109 247 541 & 561. Messages vary in length from a low
of 12 to a high of 49 groups noted to date.
512) ’CHERT A* Mode AM //Gl 1//E 1 1//M3/M20
Still active but like all family members is prone to sudden frequency
changes .
Try 1st & 3rd WED of Month 21.00 4015 or 5180 Call 971
Try 1st MON of Month 21.00 3823 or 4465 Call 755
Sent 138 groups on 19.3 - an unusally high GC . A futher message sent
on 18.6 (GC missed). Transmissions may repeat in the morning.
S13 & S14) RUSSIAN COUNTING MEN/WOMEN Mode AM/SSB
513) No reports received — transmissions often only 2 minutes
duration.
514) Still a few around. Consists of a repeating loop tape which goes
on for hours on end.
to
Recent logs have included:
SUH 02.00 4064 'Klever 75' MOR 19.00 4064 Klever 75
S16> OLX Mode SSB, Morse Call Op, and //M6 OLX
St i 1 l”operat ing 23 hours per day - ****>£ « PACT * * ***
Transmissions start at 5 ainutes to each hour for about 20-40 minutes.
About 50/50 Morse and voice messages.
Daily 23.00 - 04.00 8320 Jl 11416 // 5301
05.00 - 16.00 18303 // 14977 // 8142
17.00 - 21-00 11416 /J 8320 // 5301 ...
22.00 - 22.58 R0 TRANSMISSION (Time for a glass of beer)
S17) CZECH LADY “CQHTRQL" Mode AM
Again no changes to this station. See article on Czech stations in this issue.
Daily 13.55 to 14.02 4485//5027 - single 5F 'message'.
S 19 ) CZECH MAM 'control', Mode AM See article on Czech stations.
One reported received, sorry we do not have exact frequency.
M0H 21.00 4.6 MHz -/+ Ended 000 Roted in Greece 2.6.97
S21) RUSSIAN LA DY , Mode AM, //M45/M17/M50?
Still active with regular transmissions. Schedule very stable.
MOR 19.45 5290 Calling 481
TUB 17.40 5740 Calling 342
And possibly still:
See M45 for more detailed information.
525 ) RUSSIAN MAN “ CONTROL 1 ' , Mode AM./S6 Family
Daily at 08.00 on 14890 ID always 615.
08.20 on 11270*
*Hay not move here if 08.00 message is non-standard, i.e. S25A/B.
11270 may or may not be used thereafter.
S27VM10C Mode USB, REM DESIGNATION - ROT PREVIOUSLY REPORTED
TUI 07.00 - 07.46 8.7.87 WED 07.00 5248 25.6.97
AMD 08.30 - 08.50 5258
Ydt another Czech station, using yet another voice. It is an entirely
new station to ENIGMA. It is not a typical text station as it only
send single group messages, however, it is very complex.
same transmission two distinct formats are used, one been designated
S27A. Numerous encrypted 5 figure IDs are used, as_
significant 2 figure decode keys. Group counts, also sent a ?®
functioning ' within the transmission. Triplets, silent periods and
repeated IDs also feature in this highly interesting station. It has
several similarities with M10C and is of the same family. Furfc
details in our next issue. See also Horse Station news.
THU
17.40
5740
Calling
342
THU
19.45
5290
Calling
481
THU
20.45
3160
Calling 402
II
OTHER LANGUAGES
1
V2) SPANI SH LADY 2 or 3 'FINALS* Mode AM //M8
Active particularly during period 03.00 to 08.00. - Primarily serving
the Americas.
Mot so busy in the last few months. Ho transmissions noted TUB or FRI .
M0H
02.00
MON
03.00
MON
03.00
MON
04.00
MON
04.00
MON
05.00
MOM
08.00
SUN
02.00
8186
6820 *
6855 *
5177//6797
6768
8012
6795
5782
USD 02.00
WED 03.00
MED 03.00
WEB 05.00
WED 05.00
WED 06.00
7890
THU
4479
THU
6826
THU
7726 *
9153 *
SAT
8786
SAT
04.00 7485
05 . 00 6797
06.00 9269
00.00 10128
02.00 4028
(*) Hot same message.
SUN 05.00 7726 SON 06.00 6786
SUN 06.00 4028
Recently several reports stated that transmissions have ended with no
"Finals'!
V5A) COUNTING - SPANISH 4F
Just one report received.
POSSIBLY DAILY 03.00 6802 For ID 790
!
?S) SPANISH LADY ' 00000 ' EHDIHG, Mode AM //S8 Family
Part of the S6 Family. See G6 for further details.
Schedules frequently change, but gives a strong signal in Europe.
FSI 20.00 March 8060 May 12210
IDs heard: 685 & 834.
?7) SPANISH MAH, ENDS '000 000', Mode AM //S7 Family
See G7 for further details. Quite busy at present. Transmissions noted
TUB 06.00 Frequencies sometimes used for 1 month then changed. All
THU 06.00 transmissions repeat messages on two further frequencies.
FRI 20.00 Nil messages are only repeated on one further frequency.
IDs noted: 212 273 514 654 749 881 893
EASTERN MUSIC STATION Hode AM /B9 , .
This station is related to E9 the 'Magnetic Fields outfit.
The language used by V8 is Arabic, and uses mimed single digits and
multiple numbers.
Single Numbers in Arabic are - (1) Wahid (2) Ethnain (3) Thalatha
(4) Arba-a <5) Khamsah (6) Sittah (7) Sab-ah (8) Thamaniyah
(9) Tes-ah (0) ?
12 -
■*' o
Transmissions seen to take place on the first FRI and first SAT of the
month. Boted on April 5th and May 3rd. See also details on E9.
More tapes sent at double speed staking the whole transmission
inpossible to copy unless you can write very fast!
1st or 2nd FRI 08.20 11290 +/- 5kHz Try 08.20 or 09.20
1st or 2nd SAT 18.00 8645 +/- 5kHz Try 18.00 or 19.00
V13) HEW STAR BRQADCASTIHG Mode AM
The only Mew Star Broadcasting frequency which seems to regularly
reach Europe with a readable signal is 8300 which can be heard in the
afternoon and evenings.
Heard with a weak signal in the U.K. at 15.00 A 16.00 8300
Other frequencies received - 9725 11430 13750 & 15380. See Sinon
Mason's column in this issue for sons interesting news about Mew Star.
715 MORTH KORBAB - VIA RADIO FYOMGYAMG Mode AM
Heard in South Korea - 3250 15.00 sending messages for 6119/26 groups
3232/53 groups
7115/72 groups
Interesting 4F agent ID numbers!
I have also seen an E-mail message from Glen in Canberra^ Australia
which mentions a possible Morth Korean station on 6214 blocking out
6215 maritime distress and safety channel.
This is reported to be operating daily starting on the hour at 13.00
for about 10 minutes then again at 14.15 and 16.00 for 10 minutes with
music and numbers. This is reported by Mike in Kent to be just
readable iii‘ the UK. Reports/comments welcome.
XPH HIGH PITCH PQLYTOHB TRAHSHISSIOHS - Mode AM/S7 family.
Still some regular time slots in use. Changes from UTC winter time
back to BST for summer. Frequencies are changed most months.
Two regular transmissions have been noted although others do exist.
TUESDAY AMD FRIDAY EACH MEEK. *
JAM
21.00
5754
FKB
21.00
5754
21.20
5254
21.20
5254
21.40
4454
21.40
4454
MAY
20.00
12219
JUN
20.00
13442
20.20
11019
20.20
11542
20.40
9919
20.40
102*2
*»•
SEP OCT
Also noted on MED at 06.00 06.20
20.00 SUMMER 21.00 MINTER
MAR
21.00
6959
APR
#20.00
10423
21.20
5858
20.20
9123
21.40
5258
20.40
7523
JUL
20.00
12219
AUG
20.00
10830
20.20
11019
20.40
9919
.MOV
21.00
5431
DEC
21.00
5754
21.20
5131
21.20
5254
21.40
4031
21.40
4454
06.40
13
Xfii The 8 Tone repeating stations are still very active. Mo schedule
has ever been - established. Some transmissions have been known to
repeat within the hour.
It is well worth staying on the frequency once the 6 tone JJ
ends. On odd occasions a short string of Morse is sent followed by ai
FSK message. This sometimes occurs about 30 seconds after the 8 tone
signal leaves the air.
Several reports have picked up on a story which mentions a facility
for agent communications - or a Humber station to you and I .
"According to reports in Popular Communications (RD Baker) and Jane s
Defence Weekly - President Bill Clinton is stiil under pressure by
congress to force the Russian signals intelligence (SIG1HT) facility
at Lourdes, Cuba (near Havana), to be closed. Russia s SIGIHT effort
at Lourdes is carried out by Russian military intelligence C£RU) and
the Federal Agency for Government Communications (FAPSji.). The FArhl
evo lved in the early 1990s from the former KGB's SIGIHT service.
The Russian Foreign Intelligence Service (SVR) also has a
communications centre at the facility for its agent network xnHorth
and South America, according to testimony before the U.S. Senate s
Select Committee On Intelligence in 1996 . about Lourdes. The facility
is the largest Russian SIGIHT site abroad 4 ” -
Details about Lourdes also appeared in a Sunday Times Hewspaper report
and according to United States Department of State Publication 834/
Background Hotes Series, the Lourdes facility was established in th
ISSGs after Cubau-Soiriet ties led to the Cuban Mxssxle Crxsxs-
Lourdes facility is indeed known as where numbers transmissions in
several modes originate, these been transmitted from a remute s»„e
nearby.
And finally, MIS is to release its secret files (but don't get too
excited). Archives from 1909 to 1918 will be made public. The names of
MIS officers operating during the First World War will not be removed
but th® names of agents employed by MIS will be excised.
In other moves to open up the service, Stephen Lander, the current MX5
Director-General is planning to publish a telephone number Cno, not
the Government Communications Bureau one) for HI 5 to give people an
opportunity to ring if they have information or wish to offer help.
Information about MI5 already in the public
the Internet . —
Changes to the BHIGMA Check-list. For Morse changes see Morse News,
(incomplete) _ .
Please update your station checklist with the following.
domain is to be placed on
E18) 'Edna Sednitzer ' EE version.
S2) Drums & Trumpets
58) TT
59) Polish Counting
S10) Czech Lady I (C variant)
S18)/19 Czech Man ?RE-ACTIVATED -
S27) Czech Lady II
RE-ACTIVATED
HO LOHGKR ACTIVE
HO LOHGER ACTIVE
?RE -ACTIVATED (Always infrequent)
RE-ACTIVATED
DESIGNATION ' HOT YET DETERMINED
HEN DESIGNATION
Dorment/extinct stations noted as such after a year's absence or more.
I<4~
WORSE STATION NE&B
By M.B. •
Worse activity levels are still very high and far exceed voice
station activity. Those of you without knowledge of Worse,
who trawl the bands only for voice stations don't know what
you're missing I Learning Worse isn't as daunting as it may
seem, especially in the field of numbers stations, and anyone
with a serious interest in these stations needs to take Worse
stations into account in order to have a proper understanding
of the subject. A full understanding of many voice stations
isn't possible without taking account of their sister Worse
stations - they are inter-rel ated and cannot be treated in
isolation. In the next issue we will include a feature on
identifying Worse stations aimed at those of you who are
missing out on 80%+ of numbers activity. It will include
basic Worse code techniques, starting with how to recognise
the numbers, 0 to 9 - an essential requirement i Professional
intelligence agents, 'sleepers' and 'illegals' with radio
communication roles are generally all proficient at Worse, and
are often required to send messages back - never sent in voice
modes for obvious reasons. Voice stations are one-way only,
and often send messages to d issidsn t/ex i le groups, untrained
in radio technique. It is worth remembering this when
considering the plethora of Worse stations still in operation.
Now for the news, and, as usual, there's an awful lot of it*
(All IDs listed have been active from at least April onwards)
W1 Included elsewhere in this issue is the second list of EOM
(end of month) transmissions, this one covering the period,
August 96 to July 97. In the last issue I mentioned 'an
unprecedented 57 group message' ; this has now been beaten
three times over, for a 'B' network transmission (931) on Th
3.7 (2030:5737) sent a phenomenal 173 groups, after already
beating the record on the previous Thursday with 107 groups.
The 173 GC msg had been compiled on 2nd July, a day before
transmission, and the 107 GC msg on 26th Way. Before then 931
had been sending standard 40 and 50 GCs. The central zero in
the final group of standard W1 messages can now be explained -
this space is used when GCs exceed 99. In the above two
examples this group is 02172 and 26106. This 931 transmission
repeats at 2100 on Fridays on 5330 (formerly 5751), but uses a
different ID - 871 - in the same way that W45 and S21 use
different IDs for the same messages (150 & 342) further
confirming the same hand at work. Why did 871 change its freq
while 931 made no move? These transmissions are quite lengthy
(around 40 mins) and are keyed more slowly than the average
Ml. I have not yet confirmed whether the same operator sends
these long transmissions out twice weekly live each time, or
whether the hand-keying has been recorded onto tape. The 173
15
8C message is still being sent (31.7) and if two more are sent
next week we need to look out for any slight differences in
keying .
Have the end-of-mon th trs finished? All six EoM trs for June
and July sent standard Ml formats. This has happened before,
but not for well over a year, and never have so many been
missed. We await August's dates with trepidation [
Another newsworthy observation concerns those peculiar final
groups. Why include the SC-1 as the last three digits, wnen
the GC is already included four times in the transmission?
Perhaps the answer lies in what I once assumed to be merely
occasional errors. For example, a 41 group ' B' network
message (Sun 13.7 1915; 5238 'to' ID 254) sent a last group of
07039 where the final digits should have been 040. As errors
within a message are assiduously corrected, I've yet to hear a
last group 'error' corrected. This would tend to indicate
that such errors are not really errors at all, and that, in
the above example GC-2 is significant. If not, then the GC
element within these groups is pointless.
Staying on the subject of this final group, the 'A' network
transmissions on 17.7 both gave 13th July as dates of origin
i.e. the previous Sunday, yet the intervening Tuesday
transmissions both originated on that same Tuesday. This is
the first time that 'A' network messages have been compiled on
a day previous to their transmission . Incidentally, the usual
operators must have been on holiday on this Thursday, for the
keying was atrocious! Most likely, an M50 operator was asked
to stand in.
Apart from the usual 025 'A' network ID (which will change to
463 on September 2nd) active 'B' network IDs include: 053 254
719 871/931, At least two others exist at present.
M2 As schedule changes are so rare with this station it is
easy to overlook them when they do occur. There have been two
changes, which may have taken place some time ago. The 181
schedule has moved from its long-establ ished (since 1970s)
Monday evening slots to Saturdays: 1200 on 5737, 1300 on 5821.
Also, a new schedule number has been added: 626 operates
Monday to Friday at 1300 on 4573. This is quite a major
departure in the habits of this rather conservative station,
for it had never previously appeared on Fridays, nor did any
schedule number run more than three transmissions per week.
Errors are unknown. Apart from these changes all else remains
the same.
M3 Usual behaviour patterns and activity levels. Active IDs
since April : 010 Oil 012 013 016 017 018 019 - 031(new) 035
040 041 042 043 044 - 121 - 183( lost after Aug 95) - 214
216 ( new ) - 496(still operating MCW & German Gil) 503 - 552 -
741 742 ( new ) 743 - 752(G) 755(S) - 971(5) 976. It is
C^parcLVc clusters)
interesting that the 01 x and 04x clusters all remain below
6 MHe and favour 0630-0930 period. The other clusters have
always been more adventurous. At present the only
operating above 6MHz and up to 1300 ares 133 214 21.6 -496 503
552 741 742 743 752 & 976 - using 6330 6430 6640 7444 7580
7650 7790 7840 8033 9950 & 10720. The other active freqs
includes 4015 4780 5090 5120 5180 5360 5365 5520 5550 5624
5330. All the usual freqs are worth trying. Freqs and IDs
are liable to reactivate at any time. ID 552 used the M3A
format (111) on 27.6 & 4.7 reverting back to normal the
following week. This ID is prone to Ills & 333s; I've only
caught it sending a message once - on 11.12.95 with a very
high GC of 149. For the rest of the time it communicates in
this minimal fashion. With few exceptions M3 GCs stay within
the 50s, the only ones since March being 017 (27.3 0800:562.)
with 151 (at 0830 019/00 came up on 5365 while 017 was still
sending) and 018 (10.4 0730:5550) with, unusually, another 151
nroups. The messages could well have been the same, but if
so, they were encrypted using different keys. Until recently
the 'special' ID 121 has used Morse only, however, it now also
uses German, (see Gil) 496 is still active in both MCW and
German -
M4 Probably no change. See G2 for most of these.
M6 ( QLX ) No change - same schedule and IDs - as expected.*
M7 Quite elusive. No significant change in activity &
habits. Logs are inadequate and more work needs doing to u
this station out. IDs , being only sent three times are hard to
collate. Active IDs where known ares 078 35i 701 765 78b bOb-
844 & 875. 875 is a special operation ID - see N10 for
details of this. Thanks to ' J r (Cheltenham) for confirming my
suspicion that M7 was intended for unattended recording
equipment. Actually, it is a less sophisticated, but equally
effective alternative to polytone (XP) as used by the
Russians. The bia question is: Why do these few Czech
'agents' require this facility? One can only assume that
their daily routines are unpredic table, and so they are unable
to guarantee to be free when scheduled transmissions take
place. Just to be on the safe side, some M7 IDs at least,
send repeat transmissions . Another possible explanation, is
that these agents are particularly vulnerable to discovery ,
where to be found with even a domestic SW radio may arouse too
much suspicion for their liking. If they instal their radios
and recorders at remote locations to their
homes/apartments/hatel rooms, such as a nearby shady copse,
deserted barn or empty house, they need only return at
irregular convenient intervals to pick up tapes and replace
batteries. Regular listening patterns could never be
established by enemy surveillance activities.
Pi noticeable decrease in activity has taken place. Only a
few transmissions per week being logged in Britain. A similar
* QLX was haring transmitter problems during the week ending 2nd Aug - for
a while only one transmiiter was functioning (9320kHz). By 3rd NO transmi-
ssions were running, and nothing has been heard since# (5# 8 0900) Could this
be due to flooding at the tran^tting site?
decline can be seen with its sister station 0 2. From being
unusually active it has become unusually quiet. Still using
the X50/150/150GC triple message format. With very little
information coming in to us from the Americas, it is difficult
to be sure whether this decline is apparent or real - it may
be due to poor propagation, although most signals are still
fairly strong. Some of these trs come from the old Soviet site
at Bauta.
M10 A lot to report this time. An unusual sequence of
events took place between 23.4 and 27.5 where unscheduled
transmissions with unusual 'circuit numbers', 'special' IDs
and split messages featured. This was in addition to all the
usual scheduled transmissions. Here are some samples of this
special operation;
Wed 23.4 1400:5017 888-522/45,689/19; 522-91/20= , 522-49/25=
, 689-13/19= (Note the split message to 522 of 20 & 25
groups )
Wed 14.5
Thu 15.5
Thu 15.5
Thu 15.5
30/06 (a
Thu 15.5
Non 19.5
12/13= ,
Non 19.5
Non 19.5
Non 19.5
0800: 5038//4624
0730 s 5038//?
0800 : 5038/ /4624
0830: 5038/ /NF
six group message
0900: 5038/ /NF
0700:5015//?
266-66/15=
555:179-12/26=
777:179/25; 179-28/14= , 179-53/11=
555:179-36/20=
222:228/16,179/20; 228-39/10= , 228-
1 )= , 179-11/11=, 179—43/ 09=
333:179/28; 179-63/16= , 179-58/12=
777:875/28,266/15; 875-37/15= , 875-
0720:5015//? missed -52/16=
0740:5015 N7 '0' 875-81/30= 'U'
0800:5015//? 888:875/59; -12/05 ( five groups! )= ,
-57/54= (5+54=59)
Non 19.5 0830:5015 M7
Tue 20*5 -0700:5015 H7
Tue 20-5 0740=5015 M7
Non 26.5 0730:5038//?
Non 26.5 0800:5038//?
Non 26.5 1100:5038//?
54/16= , 284-39/18=
Tue 27.5 0700:5038//?
02/11= , 254-48/13=
Tue 27.5 0730:5038//?
Tue 27.5 0805:5006//?
Tue 27.5 1100:5038//?
' R' 075-40/25= N'
missed (0705)= 'F* (35 min silence)
R- 875-36/30= N"
333:179/30; -45/11= , -17/19=
555:179-53/25=
777:179/27,284/18; 179-48/11= , 179-
444:179/30,254/13; 179-88/19= , 179-
777:179/20; -51/10= . -52/10=
333:763-21/21=
111:179/15,394/10
What does all this mean? What can we glean at a first glance?
With the exception of 666 & 999, all triplets feature in this
sample, clearly disproving 'Langley Pierce's' so-called
Circuit Number theory - which may have held true at that time,
but even that is unlikely. They are certainly operational
codes of some kind, though. The frequent changes of CN, ID
and traffic over very short periods suggests an almost real-
time, ongoing situation, (as with Ml EQM trs) The choice of
IDs is also quite enlightening.
179 is an old 'special' , only linked to these anomolous trs«
e.g. way back in 1994 (16.5 1900:5521//?) it was associated
with such a transmission: 333:179/13. It is never to be found
operating within normal schedules. The same applies to all
the other IDs above: 228 254 266 284 394 689 763 & 875. 76.1
has, however, been associated with 248, which may or may not
be another candidate for this list. These two occurred in the
same period in what could have been another anomalous tr s Wed
14.5 1940:5295//? 555:240-12/20,763-24/30. 875 is
particularly interesting, as it's not only an M10 special',
but also used by that M7 that kept appearing. If we look at
19th May we see messages being sent to 875 by both M7 and M10
over a very short period. If we assume M7 cannot be
immediately received by its recipient, it would imply that 875
r-@-fei~s -$-q more than one individual? a group or cell opei ating
with the same mission, but not at that time in communication
with one another. This could explain that little anomaly.
Another oddity is the 'F' tone sequence; a four element
sequence has never been noted previously. (The letters given
are not actual Morse letters but approximate to them, the
dashes being disproportionately long.) The busiest ID seems
to be 179. In the 15.5 sample it received seven messages
within less than two hours! '179' must have been monitoring
from perhaps 0720 to after 1100, at least on some of these
days. Note also those unaccountable freq changes, especially
that odd 0805 tr on 27.5 when it moved to 5006 from 5038 and
then back to 5038 later! News has Just come in that this
operation is still with us - Tue22.7 1650 (rapid dashes R10 -
back again! ) :5040//? 333:179/20,394/15; 179-04/10= , 179-
05/10= , 394-10/15= Another split message for 179. Those DKs.
of 04 & 05 look a bit suspicious - compare these with 27.5
0730. Another big query is the tendency for these anomalous
trs to so often include two messages for the same ID - where
the call's GC is split into two later.
'Anomalous trs' are defined as those that: a) do not use 555
as CN , b) use 'special' IDs i.e. those not associated with
regular schedules, c) those which use irregular scheduling
patterns .
M10C This encrypted five figure ID variant (a direct
equivalent of the old S10) is still operating, and was logged
on Thu 10.7 1000:5704//? Unfortunately, the beginning was
missed, but at least four messages were sent: -91/20, 64512-
95/16, 02125-99/19, 95447-96/15. Note that all the DKs begin
with 9, and that all the messages are short. This is
significant as a variant of the newly-discovered Czech station
327 shares these characteristics in common. A schedule for
M10C has not yet been established; there may not even be one.
M12 Habits closely follow those of all other S7 family
members. Seems to be less active than usual. This family, and
the other main Russian family (S6, M14 etc) both use ID-
specific schedules. Schedules (and modes/ language/Morse
19
speed) are 'tailored' to a particular recipient's
requirements. H12 nearly always uses a 'following-on' repeat
pattern, where a first repeat follows on after the initial
transmission , but on a second freq. The second repeat follows
on after the first, on a third freq. However, the 963
schedule every Friday at 1600 on 12132kHz sends its single
repeat an hour later on the same freq. An even more unusual
. thing took place on 25,7: at 1600, 59 groups were sent with
decode key of 186, yet at 1700, . instead of the expected
repeat, a different message of 148 groups was sent, along with
a DK of 2806. In both cases the ID was the usual 963, so was
this an error or not? Recent IDs includes 112 132 151 214(2
msgs on 24.7, both over 200 groups) 310(367 groups on 27.7)
fXl 362 418 425 434 445 A 537 571 658 721 749 785 895 918 & 963.
More queer goings-on with ID 151 - on Sun 20.7 1900:11567kHz
it sent a DK/GC of 792/66. This sounded familiar, so I
trawled through earlier logs and found that an identical DK/GC
and message was being sent in December last year, and into Jan
'97, but this time the ID was 304. The time was an hour later
at 2000, and the freq. much lower - 5066kHz - quite a wide
seasonal range. Is an agent now receiving the same message
that was being sent to a different agent over the Hew Year, or
is this too naive an explanation?
M13 The big news this time concerns the return of (113' s
sister station, E18, showing that the agency now has a need to
communicate with at least two non-Morse-trained 'agents' who
speak English. Identifying and keeping track of E18 would not
have been possible without a thorough knowledge of M13's
habits. When I first logged the return of E18, then unknown
to me, I compared its format with those of all known stations,
and came up with M13 as the 'best fit'. I then extrapolated
(113' s scheduling pattern onto EI8 to predict its next
appearance and serial number - correctly. This is just one of
many examples where Horse literacy has assisted in furthering
our knowledge of voice stations j most voice and their Horse
counterparts are interdependant . Those of you who make no
attempt to learn Horse are not in a position to seriously
study the habits of voice stations - agencies do not make this
discrimination i
Having said in the past that H13 message serial numbers
increase by one each month I've now discovered that that's not
strictly correct. Host of them certainly do, but a few IDs
send at least two messages per month causing a serial number
to jump by 2 or 3 by the end of the month. So we cannot
absolutely rely on the 'counting back' theory to determine the
origin month of any particular ID — we must first establish
that ID's habits, preferably over a few months. Activity is
still quite high, but for some unaccountable reason I find
that a special effort is needed to locate transmissions. (You
can guarantee there'll be one - or two - somewhere at 2100
every night). Oddly, I have more success finding these on a
cheap portable with a 4 inch analogue dial covering 7~22HHz ,
2.o
I
and then checking its freq on the RA17 [ Active IDs - with
recent SNs - include: 134-155, 175-193, 254-163, 272-190, 281-
167, 284-154, 346-152, 378-189 ( new ) , 411-176, 417-153,
491:000-160, 522-156, 752-264, 823-154, 24,t-tSX .
On 15.5 when I logged the reappearance of E18, the 'garbled'
transmission to 718 used the SN, 102, yet when I heard it the
following day, the same ID was using SN 106. It had risen by
four in two days, indicating four further messages had been
sent - something which this family never does, so I can only
assume that the 102 transmission was a test, playing a dummy
message, or a 'garbled' re-run of a genuine previous message.
ID 307 is behaving normally sending monthly messages - SN 114
will be sent in August.
M14/24 Habits closely follow those of all S6 family members.
Less active over recent months. Recent IDs include: 147 168
392 485 541 571 633 642 675 695 743 786 906 & 972. This
station recently beat its own GC record on 23.6, sending an
incredible 431 groups - even at 38wpm this took 45min to
send - an overall Numbers Station record . (lb ^ 0 ( 0 ^
M16 (BEY) Still following the same schedule as always. See
article in this issue.
M17 Probably no change. Still as active as usual. Some high
GCs lately - 40**- A record 79 groups were sent on 3.7 (66531)
M18 Still around changing its freq every so often. Not
really worth listing in future as it never doss anything apart
from occasionally changing its freq. Last two: 3802, 4165kHz
but has moved again.
M2Q Definately one of the M3 family. It has occurred a few
times recently always on regular M3 freqs. Messages, so far,
have never been sent. It may or may not act merely as some
kind of status indicator without having a message role. This
isn't easy to determine, as so many IDs (especially voice)
seem to be sleepers, receiving messages rarely, if at all. As
M20 has no ID, perhaps it's a general or emergency/warning
call of some kind. We can but speculate!
M21 Still all over the place doing the usual.
M22 (4XZ) No changes noted although little monitoring is
devoted to this one. Messages sent frequently throughout the
day .
M23 Been very busy over recent months with all kinds of daily
'runs' using all kinds of disguise - none of them very
imaginative, and all quite transparent. So much has been
happening that a feature on this station is really necessary
to first explain its habits, before we can go into its recent
activity. M23 certainly holds the record for long-term
'active inactivity' and dedication to its cause: Two daily
'll
schedules began - using the odd/even format - around mid-
February this year, at 0800 & 1400, both on 8307//9285. They
have been around ever since, not once having yet sent a single
message. The odd-numbered 'ID', 579 being sent each time for
ten minutes. One day this will change to something like 428
and the agents will fall out of their seats with shock, and
madly reach for their notebooks and pencils! So will I, and
so will our professional colleagues at CS0 , unless, of course,
the Brits are behind this oddity (?)* Another possibility is
that this long run will suddenly come to an end without any
messages being sent - it may serve as a daily "Hello, all's
well! " and order an agent to "get out quick!" before the end
of his tour of duty if things get too hot! It may finish with
one single message of thanks/farewells. Like so much in the
Numbers Station game we'll never know (nor will the
professional monitoring agencies) but we can speculate and, in
time, it will give us a clue. So keep listening daily, if you
can, while it lasts! (still running in August). Something we
may be able to determine is whether these two transmissions
are being sent to the same agent/cell (or whatever), or to
separate recipients; only patience will come up with the
answer* This is the only 'text type' station which regularl y
keeps in touch with its 'agents' on a daily basis. Yet
another new format has been active. This one uses a two
figure call; two identical figures, such as 33 or 44 indicate
a message to follow, whilst two different figures, such as 24
indicate no message. This station seems never able to settle
down, and is hyperactive in its use of variants. The 00000
variant has also been very active.
M26 After comparing this station's habits with those of M34 I
now realise that they are both variant formats of the same
highly complex station. We may as well keep the same two
ENIGMA reference numbers, a l though there are more than two
formats * As before, M26 will refer to the 98 (95,97 etc)
style, with long drawn out transmissions. M34 will refer to
all other - non-98 - variant formats, including the only
'normal' one: 2fig IDs followed by conventional 5fig messages.
It's not really worth discussing the recent activity of these
stations at this stage. Schedules are unpredictable (so far,
at least) and transmissions infrequent, but information is
slowly being built up, and will be published at a suitable
time .
M27 (BTV) No reports for over a year now. Will not be
routinely included in future. See M53 for some idle
speculation .
M28 ( HEP ) No change. See letters pages. Doesn't warrant
routine coverage in future.
M29 (VDE) Lost at present, but no doubt is still around
behaving in its predictable way. The only unpredictable
aspect of this station is its ever — changing schedules. Once
22
we've established a schedule we can then follow it. Just the
same applies to its voice counterpart, 64. To complicate
matters, there is often more than one schedule running at the
same time, and changing at different times, some running
weekly messages daily; others running monthly messages weekly.
In addition, there are two Morse variants to consider - those
with no preamble (as with S4 ) , and those which include
date/time groups etc.
M55 (P8K) Dormant. See M51 for more speculation.
M34 See M26 .
M39 As schedules appear to be unpredictable, we can only
catch samples of its activity. It has been quite active
recently, appearing at irregular intervals and odd times.
Like M26/34 it is found more by chance than by design, and can
get quite busy when it is. around. A most interesting
observation made by one of our monitors was the distinctive
keying ' f ingerprint ' noted in a very recent transmission.
This bore the hallmark of an identical peculiarity that I've
noticed for a while on one of MIO's transmitters . Like M10,
this station uses two parallel freqs., a short zero and
strings of dashes. For a further clue, see my article on the
Czech stations in this issue.
M43 (6XMB/G57A group) Suspicions aired in ENIGMA 12 apply
more forcefully now, in the light of information received, but
we would like independent conf irmation . As busy as ever until
recently, but not to be routinely covered in future, as its
primary mode is not Morse. Transmissions went dead in July, a
similar situation to last year .
M45 See also Ml. The 55555 first group, ushered in with the
New Year, reverted to its usual 00Q00 on its first March tr.
and has remained so ever since. At the same time the last
group reverted back to random. However , this pattern did not
continue, for this group is now of the date/SC-1 type again,
so it isn't always dependant on the first group. Very odd! A
52 group message began on 31.7.
I »150 Becoming better — behaved in recent months. Keying has
improved , but can still be atrocious at times. Format has
settled down to standard Ml type, 50 groups always being sent.
Sometimes this station can be heard nightly; sometimes it
disappears for a week or more. Its schedule is
unpredictable - daily in theory but not in practice -
time/freq haven't changed for years. Operators graduate to Ml
from here, once they've acquired suitable proficiency; when in
dire need, they are dragged in anyway, it would seem!
I »151 Still as frustrating as ever, due to its rigidly-applied
' non— schedu 1 e ' . Everything about it says "French . I may be
wrong, but I suspect it replaced the well-behaved P8K. (A case
23
of 'plus 9 a change....' maybe?) Very busy sending long
strings of 100 letter messages. Logged last night (31.7) on
4623//5370, for what it's worth.
1*152 Very infrequent. Has been active recently but cannot
find details! Will be covered next time round.
M53 NEW DESIGNATION - First logged by Guy (Portsmouth) on 2.5
at 2000 on 8231kHz and has continued on most days ever since.
I recently found a new slot for this ones same freq.(8231) at
2100. Another ' dai ly-in-theory~but-nat~in~practice ' station *
but more reliable than M50. Occasionally misses a few nights.
Transmissions can often be heard at both times on the same
date. They are not repeats. The 3fig IDs are random (like
M27/S8) and sometimes messages are sent to two IDs in same
transmission » Repeats are sent over the following two or three
days .
Format: "VW CQ 747.822 „935 M call (RSmin) - the full-stops are
actually sent in Norse (SEA). m CQ 822 CQ 822 CQ S 22 HR HR
47 47 = = (47 x random 5fig single) SR AF? RPT RPT VVV CQ 822
CQ 822 CQ 822 HR HR 47 47 = - (R msg ) " 2nd message for, in
this case, 935, follows in similar way. Transmission ends "AR
AS VA VA h . Short zero, fast auto Morse.
It has similarities with M27 & S 8 , including its scheduling
pattern and 'fussy' procedure.
M54 NEW DESIGNATION On Tue 10.6 at 0800 on 9252 I heard a
very strong ICW station repeating ' CQ CQ DE V890 V890 QRIT
repeated for 5 min and using a short zero or maybe a ' T '
(VB9T). Since then, transmissions have been erratic, but
always same time/freq: Tue 24.6, Wed 25.6, Fri 27.6, Mon 30.6
& Mon 14.7. Coincidentally (1), a strong FSK RTTY
transmission has appeared on some of the intervening dates
using a similar bogus callsign and similar procedure. This is
one from Tue 8 th July: ' DE K231 QTC 1 THE QUICK BROWN FOX
JUMPS OVER THE LAZY DOG 1234567890 RYRYRYRYRYRYRYRYRYRYRY
NR 001 GR 81 = PBKLH HZLLU'. and so on, the odd 81st
group being ' QTCKK ' fol lowed by ' BT NNNN ' . A repeat followed:
'RPT NR 001 GR 81 PBKLH etc.... QTCKK BT NNNN AR'.
This is not a Morse Number Station as such, but the Morse null
message call is a novelty worth recording. (As I am writing
this, a ten minute RTTY message has just finished - 29.7 0910)
M55 NEW DESIGNATION Although I have only logged this station
once so far, it has all the charac teristics of yet another
Numbers Stations Mon 7.7 2100:9255 a strong ICW signal sending
'529 529 529 529 529 529 000 000' (short zero). Almost like a
'doubled' M12 null message transmission , it could well be an
obscure M12 variant. Uncharac teristical ly , though, it lasted
for 8 minutes. It didn't appear on Mon 28.7 - the first Mon
of August may be worth a try. Has anyone else heard it?
M56 NEW DESIGNATION Logged Tue 10.6 2100:4040kHz sending
24
repeatedly “3:08920 2:08083" until 2200 when a very short <2-4
sec) fast burst of Morse was sent, and then followed by
"2:00893 3:00093" Repeated until 2210+ Apart from that
unexpected fast burst, keying was slow (auto) at 8figs/min.
Long zero used. The colons were sent as II.
MX (SLHFMs)
A couple of readers have asked why we bother to continue
covering these 'markers'. The simple reason is that they are
not all merely channel markers, in fact none of them are.
Those which are allegedly operated by the Russian Navy
(generally short-lived 'P's) hardly stay on frequency long
enough to warrant the term 'marker'. They seem to serve more
as tuning signals, staying on (usually) for around 5 minutes.
We have yet to receive convincing evidence that they are even
run by a Navy - Russian or otherwise. Supposing that their
alleged locations (Kaliningrad , Archangelsk etc.) are correct,
and that transmitters are at Naval sites, this still doesn t
imply that the Russian Navy is responsible for traffic. (The
large British Naval HF/LF transmitting station at Inskip,
Lancs. also carries traffic originating from the RAF. SBC
External Service sites also carry espionage traffic from time
to time. The RAF have absolutely no operational role at^ RAF
Menwith Hill. These few examples, should illustrate the 'hall
of mirrors’ suurounding this issue).
Even so, I am by no means denying that some of these MXs are
run by the Russian Navy. If they are, then the short
Morse/RATT messages sent and the selection of frequencies used
are not typical Naval procedure as far as I'm aware. Nor are
they ITU-registered like normal Russian naval transmitters,
which are allocated appropriate callsigns and frequencies.
However, this still leaves the bulk of MX activity unaLuouu .eci
for. We must remember that all long-term solitary 'beacons’
and all cluster 'beacons' never have been known to send
traffic of any kind. We challenge anyone to provide us with
logs of such traffic. Just because a single letter is being
sent on say, 5880kHz, followed by traffic, it doesn't mean
that another or the same single letter being sent on say 3174
or 7039 will eventually do the same. They won't, for they
have very different roles, and could easily be operated by
totally different agencies. A letter is a letter is a letter:
nothing more. It's the stations particular habits which are
all important; where content is minimal all we have to go on
in the way of externals is its habitual characteristics .
Not only are the cluster & long-term 'beacons' quite different
to the 'suspect naval' beacons, but they are also quite
different from each other. This is obvious from their habits.
The cluster 'beacons' are almost certainly true beacons, not
markers, but strategically-placed propagational beacons. We
also suspect that that they are closely... [continued on page
H1A/B (EoM) TRANSMISSIONS August 1996 to July 1997 Sheet 4
Month
& Time
(Element)
No, A1/A2/A3
B1/&2
c
I
D
E
(ms;
8>
F
Repeat group requests
G
AUG 18
025
13829
333 12314
-
t
-
-
-
111
000
AUG 20
025
12177
333 12714
-
Ill 999
766
36
Ill ??160 90035
53616
111
000
AUG 15
025
-
333 14029
-
-
-
-
111
000
SEP 18
463 :
51683
333 51840
-
-
-
111
000
SEP 20
463
-
333 50320
-
Ill 999
503 34
Ill 49386 91161
: m
000
SEP 15
463 S
77777 (missed)
333 50083
333
08
12
-
-
- (21stsNOT last Sat)
in
000
OCT 18
463 ■
51729
i
-
-
j **
-
in
000
OCT 20
463
51835
-
-
111*111
j 213
29
Ill 37590 37590
(x3)
in
000
OCT 15
' 463
50835
Ill 59531
-
111
183
16
111 47352
m
000
NOV 18
197
88054
333 88716 111 87627
-
111*111
164
32
111 9??17
m
000
NOV 20
197
88183/88836
-
-
111
980
35
111 81335
m
000
NOV 15
197
88666
Ill 88174
-
111
| 217
19
111 73768
m
000
DEC 18
197
89616
333 89119 (once*,)
-
111 999
j 415
40
-
j in
000
DEC 20
197
89807
333 88527
333
20
333 41
-
i
-
j m
000
DEC 15
197
88451/88009
. -
-
• 111*111
! 312
30
Ill 36571 16613
j 111
000
JAN 18
197
89642
333 89112
333
24
333 19
-
-
! m
000
JAN 20
197
| 89802
-
-
Ill 999
• 868
36
-
I m
000
JAN 15
197
| 89701/88667
_
111*111
717
28
Ill 24733
in
000
FEB 18
197
89809
-
333
4
-
-
-
m
000
FEB 20
197
88813
-
040
01
(197
x3)
-
217
30
000*
m
000
FEB 15
197
88004/88719/87674 ;
-
(197
x3)
Ill
-
-
m
000
MAE 18
463
50536
333 51835
-
-
-
m
000
MAR 20
463
53836
-
(463
6)
111*111
243
30
Ill 61609
m
000
MAR 15
463
51537/51822
-
(463
x3)
-
-
111*
in
000
APR 18
463
52521
-
-
Ill 999
i 122
40
111 (+?groups)
111*
in
000
APR 20
463
51916
333 50630
-
-
1
-
in
000
APR 15
-
-
NO SIGN OF TRANSMISSION
. ,
uuiiueu VI ii
i
i
t
j
8BY 262,306,095 Sample (slightly simplified) - see accompanying article
Date
Time slot
A
B
C
D
E
F
G
All positions
H I J K
L M
N
0
Some positions not fixed - 3 examples
PQRSTUVWXY
shown In brackets
Z G,C„
21,11
h + 40
17
_
262
«.
306
095
958
629
-
097
645
-
058
(“
532
-
-
) -
-
-
-
-
-
-
9
5.12
19
131
262
012
306
095
-
-
629
-
689
097
-
246
”
532
-
-
-
- -
-
-
-
967
476
12
9.12
18
-
262
-
-
095
-
958
-
-
-
-
645
-
058
207( -
-
-
-
487)641
-
076
-
-
-
9
13.12
15
262
-
306
095
-
-
-
-
-
097
-
246
-
-
532 (
-
-
034
- )641
-
-
-
967
-
9
13.12
21
-
262
012
306
095
-
958
-
-
-
097
-
-
-
-
532
-
-
-
- 641
-
-
623
967
536
11
15.12
14
-
262
012
-
095
-
-
-
-
-
097
645
246
058
-
-
-
-
-
- “
146
-
-
-
-
8
6.1
15
-
-
-
306
-
-
-
-
-
-
-
645
-
058
-
-
095
401
-
- 641
146
076
-
-
784
9
31.1
22
-
-
012
306
095
801
-
-
-
689
097
645
-
058
-
532
-
-
-
-
-
-
-
-
776
10
2.2
15
-
-
-
-
-
-
958
-
-
-
097
645
246
058
5
3.3
14
-
-
012
306
095
-
-
629
020
-
097
-
246
-
-
532
-
-
034
- 641
-
-
-
967
-
11
15.3
15
-
-
-
-
095
-
958
-
020
-
-
645
246
-
-
-
-
401
-
487 -
-
-
-
-
-
7
1
6
5
7
9
1
5
3
2
2
8
7
6
6
1
6
(1)
2
2
2 5
2
2
1
4
1x4
100 total
total of 29 different groups sent in ii randomly-chosen transmissions* The letters A - Y are group
maicawts* They are alphabetically consecutive, but otherwise are chosen arbitrarily, and would only apply to this
Due to lack of space, column Z includes four remaining; tail-end groups, which should really have their own columns as
they are all different* Further samples would create columns of their own, in addition to these A -Y positions, which would
This sample includes
position indicators*
sample*
interleave with them (up to a possible maximum total of 999, or 1000 if 000 is counted). On 6.1 at 1540 an error (?) was made
the list, where the grouo in position Q was wrongly placed, and should have been in position E. It is not known whether
subsequent transmissions carried the same error. Due to the nature of this station, later froups are less likely to be fixed
in small samples such as this, e.g. the T position could occur anywhere between 0 and U - see examples shown.
M16A Is a variant format which occasionally appears, taking the forms: "WV 8BT 224 ZKY/763/012/893/313/008” or "VVV 8BT 084
397 224 ZKY/739/661 1 ’ (typical examples) Does anyone know the meaning of 2KY as it s not listed in conventional Z codes.
Whether the preceding groups occur in a strict sequence is not known. (They’re not separated by /) More help needed.
Ml EoM Transmissions (continued from previous page)
in
MAY 18 025 11291 333 12869
MAY 20 025 - 333 13752
MAY 15 unable to copy
JUN 18 025-288/40 JUN 20 025-189/42
JUL 18 025-717/43 JUL 20 025-211/44
333 \2 111 999 313 40 111 60060 74919
333 16 (?) Ill 999 211 42 111 37396 91357
111 000
111 000
JUN 15 025-413/30
JUL 15 025-034/35
These last six are normal Ml messages - not EoM style.
Note same DK for message in May & July 2000 transmissions, tnaybe
just coincidence - maybe not#
LETTERS TO E.N.I.G.M.A.
Welcome along to issue 13 of the ENIGMA Newsletter and our letters pages. First
just a short note about our facsimile number. Due to circumstances outside our
control the number has now changed; it is now (UK): 01274-799004 or if outside
the UK; +44 1274-799004. Please mark any messages ’ENIGMA’, as our mailing
centre receives letters and facsimiles for many different organisations.
Now, onto your letters, and there are lots to get through. First off, some feedback
about our comments concerning Swiss callsign HEP. Leslie in Sheffield tells us
that HEP is active in Morse, 50bd HI I Y and SITOR. The list so far; HEP 8400
SrrOR, HEP3 3314 CW, HEP5.5269, HEP7 6873 5Qbd/CW, and HEP%9187. "If it is
an Interpol (now Europol) station as claimed by other sources, it is one of two I
know of still active on HF. Interpol used trigraphic tactical call signs as HEP does
to indicate national origin, for example: GMP London, uEB Wiesbaden, FSB Lyons,
JPA Tokyo, SUI Cairo, TCC Ankara, ONA Brussels and AYA B .Aires. This complies
with the ITU regulations. As most of these stations have left HF for satellite I will
not give details of old frequencies used. HEP follows a convention of its own; the
numerator perhaps indicates nearest whole MHZ frequency,
on ,Ht ' No traffic has been heard passing from it or to it by another station
,and it is likely that it occupies the frequencies to keep them dear for emergencies.
It may very well be a back-up but not a very sensible one given the other modes
available. Has anyone ever heard any traffic ? B Thanks, Leslie, for your comments.
Michiel in The Netherlands also comments on HEP: "Regarding HEP, the QSLs
issued by Interpol Schweiz are convincing, aren’t they ? I have one myself and it
leaves little doubt. Not including HEP and FDC in future editions seems a wise
decision, since these are obviously stations from a different category. (Ed note:
We have never seen an offidalty issued QSL card but have heard about a so-calied
’home-made’ QSL card once reported to have been verified by HEP. If an address
is known and an official QSL card exists, we would be happy to print details for
other readers - but why the reluctance from the Swiss PTT to answer our previous
questions (see issue 11 page 14) ?
Brian in Sussex also comments on HEP: “I have been monitoring this recently, and
have sent a QSL letter to Interpol for their transmission. So far no reply, we will
see! It is interesting to note that both the 1990 and 1996 Klingenfass Utility Guides
no longer list HEP as a call-sign, although it is listed in the 1986 Edition as
Interpol, Zurich. This may help to pinpoint the time HEP changed its traffic onto
satellite links. Why Klingenfass fails to log the active frequency of 9186 kHz I don’t
know. Perhaps it was simply missed, or was not operating during recent years.
Perhaps too it may be connected with his policy of not listing number stations and
similar never-identifiable nonsense, since no traffic is ever sent. The first
explanation seems more likely in my opinion. Further, a curious coincidence
perhaps is that in the 1996 book 9186 kHz is listed as being used by the Italian
Civil Protection-Rome on SSB.
* West Wickham - but is there anything there?
+ Lyons HQ is still active on HF & has worldwide point-to-point links,
probably to other sites on this list. - Ed.
Could this perhaps be pat of the solution to these mystery stations, with the CW
marker being used to keep open the frequency and continually test the link ? *
(Ed note: It would rit be testing a link: it’s one way only).
Michiel also answers our question about the SOUD stations (also known as the
KUL) ENIGMA reference M42. Michiel says SOUD stands for (German translation
changed to English) - Soglaschenije o sistema Objedienenovo Utschotja Danych o
protivnika. We had a few problems with the literal translation at this end but it
approximates to "System for the exchange of information concerning the enemy".
Curious that it is still so busy - just who is the enemy? Could it be you and I ?
Could any reader please tell us what the word 'Objedienenovo means in English ?
Thinking of visiting Scotland for a holiday ? Why not visit one of Scotland’s secret
bunkers situated at Crown Buildings, (near StAndrews) Fife KYI 6 8QH. ENIGMA
recently received a mail-shot giving details of this cold war relic.
Run by the Ansiruther Defence Establishment Preservation Trust this amazing
labyrinth, built 100 feet below ground, and encased in 15 feet of reinforced
concrete, is where regional government and military commanders would have run
Scottish Eastern Zone had the UK been attacked and nuclear war broken out.+
For more details telephone UK: 01333 310301 or Overseas +44 1333 310301 or
facsimile 31 2040. A colour leaflet and information is available on request.
+ It is one of a large number of similar bunkers, but the only one regularly open to
the public.
Greetings now to Gert in The Netherlands. Thank you for your logs. You raise an
interesting point about the frequency usage of number stations. Concerning 3-Note
Oddity (G4), this station does choose its frequencies carefully and avoids the
amateur radio bands. You mention El 0 station CIO which used to use 1 01 25 kHz,
and say that when the amateurs appeared between 10100 & 10150 kHz CIO
disappeared? "I believe that number stations have people who choose frequencies
and are aware that amateur bands are scanned by more radio listeners than other
frequencies". Good point, Gert; these stations don’t want listeners. (Ed note: G4 &
E10 etc are only choosy in so far as amateur and broadcast bands are concerned
- they have no scruples about using maritime/aero bands).
ENIGMA continues to receive mentions in many other publications, and of course
that attracts more new members. We are still receiving enquiries from our October
feature in Short Wave Magazine Greetings to Doug in Leicester, Paul in London,
Matthew in Bristol, Omar in Berkshire and ’R’ of Cornwall. Roberto in Torino Italy,
who read about us in the Italian electronics magazine "Elettronica Flash"- the
author of the feature, Mr Borgnino, described ENIGMA as The Best* !! Greetings
to all members of “Contact Magazine" which recently carried a numbers station
report. Thanks to Ken in Doncaster for the copy.
ENIGMA also received several letters from Australia (do you get good reception of
Cherry Ripe?) following a mention in the March issue of ’Radio & Communication’.
We regularly receive enquiries about the purchase of back-issues of the newsletter;
29
recently D.H. of Sidmouth, David in the United States and Matthew in Bristol have
contacted us. We have enclosed with this issue a back-issues order form. We will
do our best to supply any orders received, but would ask you to allow about 4
weeks to complete orders. Thanks.
Hello now to a regular contributor to the US magazine ’Monitoring Times’, Takashi
in Nagasaki, Japan. Takashi has been a keen listener for many years. We will look
forward to your contributions from that part of the world.
Thank you to all our readers who renewed their subscriptions. It is a great vote of
confidence that so many readers renew. If your subscription is due for renewal
with this issue you will find a form enclosed with details on how to continue
receiving the newsletter. Greetings to Lars in Germany, who tells us about a Morse
reader package which he uses to read the numbers of OLX messages, in the
current version the available modes are BAUDOT, ASCII, AMTOR ARQ/FEC, SfTOR
A/B, NAVTEX and P ACTOR. At around $100, he feels it is good value. Details
from: Dieter Dippel, Muggenhofer Str.193, 90429 Nuernberg, Germany. Lars tells
ENIGMA that he is at present in the Army so does not have a great deal of free
time for listening.
Hello now to Jonathan in Zimbabwe and thank you for the cassette recordings of
E10 stations. Jonathan also collects books on espionage and tells us about his
latest purchase: The Guinness Book of Espionage’ by Mark Lloyd - Guinness
Publishing, 254pp, ISBN 0-85112-591-3, £14.99 UK.
The volume deals at first with the early history of espionage and earfy efforts at
cryptography, and profiles major figures and agencies of the day. I quote from the
rear cover: The Guinness Book of Espionage looks at the real worid of spying -
military, political and commercial - and charts the story of subterfuge throughout
history, it contains fascinating details on: The people; Their methods; Equipment
and technology; The famous incidents; Services and operations and Secrets in
Office.” The book also has a number of interesting appendices such as the short
histories of the world’s major agencies. It’s also suffused throughout with diagrams
(e.g. the ENIGMA cipher machine schematic) and biack-and- white photographs of
people, places and gadgets. In short, it is well worth it, and no budding student of
the subject should be without it!”
Thank you to all the readers who regularly send in logs. Your logs are very
important in confirming schedules and activity levels, and of course finding new
transmissions and frequencies - and even new stations !
Regular contributors (too many to mention) but a sample includes Rob in Essex,
those very well presented logs from Hansin Trier, Germany, Costas in Athens, Ary
in The Netherlands, Pertti in Finland, Chris in Westminster, United States, Guy in
Portsmouth, Mike in Kent. Sorry if we were unable to mention you.
A correction to issue 12, page 29: Helmut in Austria sent in some logs and says
he enjoys reading ENIGMA, he says “the German word "Militarchifren" does not
mean military chiefs. It means Military chiffres (codes). The department dealt with
3o
decoding of military codes." (Ed note: ’ChHfre’ is actually French for
figure/number/code/cipher). Apologies.
Greetings now to Peter in Saffron Walden. He writes, ”1 was interested in the
comments in ENIGMA on the subject of monitoring the local oscillator of a nearby
receiver to determine its operating frequency, after the manner described in
"Spycatcher" i.e. "RAFTER". Receivers certainty do radiate to a greater or lesser
extent; older domestic valve receivers radiate the most as there can be several
hundred milliwatts of power going into the local oscillator, 5 have often tuned
across the bands and found a strong carrier and then realised it was coming from
an old valve receiver which I usually keep parked on a World Service frequency.
Modem synthesized receivers radiate too, the synthesized local oscillator in my
Lowe runs at 45 MHz above the read-out frequency and I have in the distant past
used it as a nice stable VHF signal generator to produce a 70 MHz signal to peak
up some 4-Metre Amateur radio gear. This principle is also used by the TV
detector vans; they locate a TV set by picking up the signal from a TV’s local
oscillator while cruising past someone's house and then checking on their data
base to see if the occupant has a TV licence.
It is worth bearing in mind that our equipment can betray its presence in this
manner, there has been much in the press about VHF/UHF scanners and there
have been calls to make them illegal. A government like the present one with a
large majority and which has already announced its intention to ban such aspects
as hand guns, ’Alco pops’, fox hunting and cigarette advertising may well turn its
attention to the radio hobby in the not too distant future and may feei inclined to
pass new laws - and enforce them - with regard to what we may o: may not listen
to on our radios. I gather there are already restrictions with heavy penalties on the
possession of certain kinds of radio receiving equipment in some EU countries and
these might form the basis for a whole load of new legislation in the U.K."
We may run a short feature about the case of Erwin van Haarlem, however, we
would like to gather further information. If you have any press cuttings or
information about the case please forward copies to ENIGMA. Can any readers
remember a 30/40 minute Television programme which was made about the case
after the trial? It may have been in the BBC series ’40 Minutes’. The programme
was a dramatisation of his activities in Britain and showed the Security Services
breaking into his fiat while he was transmitting Morse by hand back to Czech
intelligence. We hope to run the feature in the next issue, so any information would
be appreciated.
ENIGMA has received a letter from a recording company producing sample -
based dance music, and who initially attempted to contact ’Langley Pierce’ (who is
reported to be ’too busy to assist in any projects’!!*} Dominic, representing the
company, composes music in his own studio and has almost finished one track
for release under the name “Complex Numbers" and is presently researching items
for his next track. The project is also looking at the possibility of producing “talk
tapes* about radio communications. Armed with this brief he contacted the Radio
Communications Agency (part of the DTI) - ENIGMA readers will be amazed to
3 !
read that the agency advised "the use of material monitored off-air may contravene
the Wireless Telegraphy Act" and even more amazingly "the use of abstract
recordings may contravene copyright law". The DT! were however most helpful in
sending an amusing two page facsimile setting out the legality of receive
equipment (in the vaguest of terms). We hope to say more about this in our next
issue. If any number station operators would like to contact us about copyright
matters we would be delighted to print their responses in ENIGMA. We look
forward to the positive flood of letters!
Greetings now to our regular reader Andreas, in Germany. Thank you for ail your
help and support. Andreas tells us about a report by Bodo Wegmann which he
found in the magazine "Informationen fur die Truppe" (Information for the Forces).
The report concerns military intelligence in the former GDR and gives a brief
history of the GRU-style organisation. It s name changed from "Allgemeine
Verwaltung" via “Verwaltung fur Koordinierung", “12.Verwaltung“ and “Verwaltung
Aufklarung” to "Bereich Aufklarung" (from 1984 onwards - translated as Department
of Intelligence). All this belonged to the NVA (Nationale Volksarmee-Nationai
People’s Army) of the GDR. They co-operated with the MfS and aiso had their own
agents, mainly in West Germany. They also co-operated with the GRU and the
military intelligence organisations of the other European socialist countries (e.g.
The Bulgarian RUMNO, Polish Zll, Hungarian VKA n and the Czechoslovakian
ZS. In 1990 after the great changes of 1989, ail this should have been restructured,
but this did not happen. According to the article, in March it was decided to
discontinue this intelligence service ( after the elections of March 18th the new
government came to power and were keen to proceed with rapid unification). The
article states that the last radio message sent to agents was in May 1990.
If we link this information with Simon Mason’s "Secret Signals", in the first chapter -
Silent Stations - he notes that the Four Note Rising Scale Station (G8) vanished
towards the end of April 1990, and the Gongs or Chimes station (G3) dosed down
in May 1990. Couid/nean that oniy G8 was operated by the MfS, and the Gongs
or Chimes station Was operated by East German Military intelligence? Comments
welcome.
Andreas also writes about our review of 'The Ultimate Spy Book". ’Just a few days
after receiving ENIGMA 12 I came across the German edition of the book. "Der
perfekte Spion" (literally translated as The Perfect Spy") costs 49,80 DM, the
publisher is Heyne Verlag, Munich, and the ISBN is 3-349-11480-9. I agree with
your review that this is a great book, very interesting. I hav^. ready many books
about espionage, but with the help of this book it is possiblejmagine what other
authors are only able to describe’.
Andreas takes me up on a point I mentioned in the last issue, where I commented
that a great deal of effort and expense is required to block number station
messages. However a former MfS officer who defected to West Germany stated
that if you missed one group it was impossible to decode a message, this raises
some interesting questions. If you miss a letter from a phonetic alphabet
transmission does this render the message useless? I would be interested in
receiving readers comments on this subject. (Ed note: This would depend on the
form of encryption used, content or continuity of message etc. Sounds most
unlikely that the whole message would be rendered useless. More likely a missed
phrase or word, which may or may not be crucial).
Several letters have arrived concerning part one of our E10 feature (part two in this
issue) - particularly the subject of possible cooperation between the security
services of South Africa and Israel. Andreas comments - "A South African
connection is not as impossible as it may sound. Note that both Israel and the
Republic of South Africa both came under considerable political pressure in the
1 980’s. Both were internationally isolated. And there was secret military
cooperation. I recently heard about the secret nuclear weapons programme(Ed
note: Which Mordecai Vanunu, still in solitary confinement exposed all those years
ago - after being ’illegally lured and kidnapped by Mossad), which was indirectly
admitted by the former Israeli government just recently and was a joint effort by
South Africa and Israel. Another point is the interest of Mossad in African countries
which are detailed in Victor Ostrovsky’s book".
Brian comments:* Very good, and I like the use of various sources to provide the
information and support the various arguments. I agree with you that the idea of
using transmitter sites in friendly countries is likely. There will always be
cooperation between countries where there is a trade-off or a mutual advantage in
doing so". As if to prove the point ’D’ very kindly sent me a vast array of clippings
and interesting documents; thanks, included was this recent clipping: "IRAN
SEEKS SYRIAN AID TO BYPASS SPY CURBS. Iran has asked Syria for permission
to use its espionage infrastructure in Europe in an attempt to circumvent tighter
controls on Teheran's spies according to Western security sources*. The artide
goes onto confirm a warming of relations between the two and confirmation that
they have signed agreements on matters including communications, (of course,
Iran and Syria were responsible for Lockerbie bombing. Libya was merely a
convenient scapegoat which served the covert interests of Western (CIA)
intelligence agendes-Eds).
We appreciate clippings and news articles - which, although not for direct
publication, are very useful in gathering information for future features. If you see
anything you think we would be interested in please post it to our mailing address:
thanks.
Message for ’O’. Please forward a mailing address in good faith. Thank you for all
information, dippings, articles and logs which are most appreciated. (’D’ We ran
the Britten feature in issue 12). Thanks also to Mike in Kent for forwarding
information of interest gathered from the Internet.
Thanks to Rob in Essex for the logs which you gathered during your recent
holiday in Greece. Remember if you are planning a trip to another country please
let us know what you hear and the signal strengths.
REMEMBER - ENIGMA IS YOUR NEWSLETTER AND WE REALLY
APPRECIATE YOUR LETTERS LOGS & COMMENTS. IN ADDITION, WE ALSO
COLLECT CLIPPINGS AND RELATED MATERIAL OF INTEREST TO OTHER
READERS - NEXT CONTRIBUTION DEADLINE - FRIDAY 28 NOVEMBER 1997.
33
NUMBER STATIONS MAKE THE NEWS !!!
Much to the displeasure of various British and foreign agencies ENIGMA continues
to promote the little known subject of Number Stations. In addition to our
dedicated private readership ENIGMA attracts the attention of both the UK
Government and overseas agencies keen to learn just what we may or may not
know ! * Helpful note to agencies-we may/ of course, know more than we
choose to publish at any time !
The subject of Number Stations has never received much publicity in Britain.
Indeed, it would be true to say that the British public know more about how to
make kreplach, a Jewish form of ravioli, than they do about Number Stations.
There has always been a slight unease about the subject in Britain. The laws
concerning radio listening are ambiguous: one must not divulge the contents of
radio transmissions other than broadcast, amateur and citizens band stations
(actually, people have been fined for listening to pirate radio stations-not strictly
illegal). The result of this being that the British shortwave press were reluctant to
acknowledge the subject until quite recently. Former Prime Minister, Mrs Margaret
Thatcher, worked herself up into a lather about the book, "Spycatcher", by the late
Peter Wright, resulting in a bizarre sequence of events which eventually led to its
ban in the U.K. (although it was widely available). I don’t have the space to go
into the story of the Zircon spy satellite affair just now but the point is clear - any
attention given to certain subjects seems to set the panic alarms ringing. Number
Stations are one such subject.
In October 1996 ENIGMA was successful in submitting a substantial article for
publication in the British news stand publication, ’Shortwave Magazine’. The 10
page puii out supplement provided an introduction to the subject and featured
profiles and schedule details of some of the most common stations. The feature,
guided by ENIGMA, gave the largest and most detailed coverage Numbers
Stations have ever received in any U.K. publication available to the genera! public.
The media are always on the look-out for an interesting story, indeed anything
which involves espionage, the Government and secrets will make a good story*,
combine all three and you are onto something good.
On Tuesday, January 14, 1997 the British national newspaper, The Daily Telegraph
ran a feature in their Tuesday Supplement* entitled ‘Is the Cold War really over ?’
Produced by journalist ’Will Thomas’ the article opens with the comment -
"Short-wave radio stations that appear to broadcast spy codes raise interesting
questions". This excellent feature induded comments from both ENIGMA and
Irdial-Discs and covered the workings of Number Stations in a format which was
easy to digest by readers with no previous knowledge of the subject. Two
photographs were induded, one of Kim Philby and the other of a substantial
antenna aloft the Hungarian embassy at Eaton Place, London. ’Will Thomas’ had,
however, pulled off something of a coup - in obtaining a comment from the
3 ^
Department of Trade and industry (more on this later).
You may be aware that the national newspapers purchase and scan the local
papers looking for interesting stories. The same is true of radio and television
stations who are always looking for a lead.
Within hours of the publication of the Daily Telegraph article BBC Radio 1, Britain’s
national ’pop music’ station was keen to get in on the story. Radio 1 runs a fast
moving news programme entitled "Newsbeaf which is aired at peak listening time
17.30 hours local time Monday to Friday. Radio 1 ran a five minute interview with
Akin Fernandez from Irdiai-Discs, conducted from the roof of Broadcasting House
and included excerpts from Lincolnshire Poacher and Swedish Rhapsody
explaining just how easy it is to tune into a Numbers broadcast.
Not wanting to be left out, London-wide MW radio station Radio Liberty 963 kHz,
followed with a feature and included more recordings.
Following on, BBC Radio Scotland contacted ENIGMA and produced a feature on
Number Stations for their programme ’Peace & Jam’. The programme featured an
interview with Akin and plenty of examples of just what you are likely to hear.
With the ball now roiling more was yet to come not to be out-paced, BBC
Television made contact with ENIGMA keen to produce a feature for the News &
Current affairs series “Here & Now", with a Monday evening audience of between 8
and 9 million viewers.
Following an Initial meeting held on January 29th filming was scheduled for
Monday February 10th. An outdoor interview was conducted by television
presenter John Walters at RAF. Menwith Hill near Harrogate in North Yorkshire
(complete with Military Police escort). Menwith Hill which has recently taken on an
RAF. designation, is wholly operated by the United States’ National Security
Agency and is the World’s largest SIGINT site. Photography is frowned upon by
local Military Police who patrol the perimeter roads 24 hours per day. Outdoor
filming completed, the next stage consisted of the filming of some indoor
monitoring, and a more detailed interview about ENIGMA and the operation of
Number Stations. The slot was transmitted on April 21st, entitled ’Number Spies’.
It also included ’soundbites’ from Oleg Gordievsky (former KGB controller) & Nigel
West (spy writer) who each confirmed ENIGMA’S view of Number Stations.
Britain’s GCHQ, DTI & Foreign Office were also approached to comment for the
programme; each replied with non-committal, non-informative ’answers’ and did
not wish to elaborate !
GCHQ commented: “GCHQ are aware of the existence of Number Stations but
cannot comment on operational matters”.
FOREIGN OFFICE: "We do not comment on operational intelligence matters' (spot
the form-like answer).
DEPARTMENT OF TRADE & INDUSTRY (They attempt to regulate all radio
35
transmissions in the U.K.) - You may remember that I mentioned a comment made
earlier by the DTI to ’Will Thomas’. For his feature in the Daily Telegraph he
managed to extract one of the most revealing official comments ever made by the
U.K. authorities. Andy Tower, a spokesman for the DTI said: “These broadcasts
are what you suppose they are. People shouldn’t be mystified by them. They are
not for, shall we say, public consumption". When the BBC approached Andy Tower
on behalf of “Here & Now", for a repeat performance, he is reported to have said:
“You can use my comments to the Daily Telegraph, but I am not prepared to say
them again to yourselves” - could it be that he had momentarily forgotten to say:
"We cannot comment on operational matters"? He should have been dismissed
forthwith for his thoughtless disregard of official reticence*
So what is the verdict ? - First. ENIGMA’S own view. Considering the amount of
effort put into the slot it was more revealing what was not broadcast than what
was. Virtually all comment had been removed from the final version and
interestingly the musical interludes used by stations had also been removed.
Outdoor shots of monitoring sites had been edited down to nothing more than
antenna shots ieaving the sites unrecognisable. Identical aerials to the three
shown can be found at HMGCC Poundon. But on the positive side, Numbers
Stations made it onto national television - certainly for the first time, and the lack
of comment from official bodies played off well against the positive backing
ENIGMA received from Oleg Gordievsky, Nigel West and Akin Fernadez from Irdial
Discs. All things taken into consideration, ENIGMA was seen to be correct in its
assumption that these transmissions “are what we suppose them to be”! Finally,
despite an audience of between 8 & 9 million viewers we have not received any
feedback from the general public forwarded on from the B BC. Our dealings with
the BBC were less than satisfactory, despite sending 3 letters of enquiry and
numerous telephone messages left on unattended answerphones, replies to which
were never returned - only a letter of complaint finally generated a response from
the ’Here & Now’ office. We were very concerned that letters of enquiry and
telephone calls from interested viewers had found there way into the Black Hole of
MI5?
Finally, on June 27 the BBC did reply to just one of our letters - “I’ve spoken to the
production team here, and to the reporter John Walters, and have discovered that
there has been some interest expressed in ENIGMA. John has been approached a
couple of times in person - and passed them on to the people who’d asked for
them - and our production secretary also received a couple of calls and again
passed on your address. So I imagine, those people would contact you direct We
also have an open phone iine alter the programme - and your details would have
been passed on to anyone who called at that time*. Despite the viewing figures
(and yes it is true, I was stopped by numerous people in the supermarket and
while out and about - all saying they had seen me on T V - such is the power of
Television) we did not receive a single letter from a member of the public who
wanted to know more ! - Could that suggest a conspiracy of silence and yet a
further example of the BBCs incestuous relationship with a certain agency famed
for its new 'open' policy ?
And now a selection of vour comments on the programme .
•Thanks for sending out the notification about the item on ’Here & Now’. I would
almost certainly have missed it otherwise. Although from my point of view there
were no revelations in the item, it was nevertheless quite something to see the
subject covered at ail on TV. It will be interesting to see if it generates any interest
from those who, up until now, have been blissfully unaware of the strange
goings-on on the short-wave bands!"
" | thought it was presented in a very positive way, light-hearted - but without the
misrepresentation or ridicule that can sometimes be used by the media"
“ Congratulations on a very interesting programme"
“ The first minute or so started to sound like a ’joke’ but ended up in a reasonable
way which gave credence to our hobby, pity you couldn’t get our address in"
" I saw you on the ’Here & Now’ programme. It was very interesting with some
familiar sounds and I was very impressed with your equipment'
"I just wanted to say how much i enjoyed the TV programme on Monday; it was
nice to see the person who is the ’brains’ behind the whole thing; I imagine that
you little thought then that ENIGMA would become what it is today, a real credit to
yourself and the others involved down there" (* one of them, that is ~ our
Frontman! - Ed)
Not all readers were pleased with what was aired - the most common theme
running through some letters we received was the way in which the programme
had trivialised a serious subject by the use of overlaid music and various gimmicks
typical of such TV presentation nowadays.
Sadly the media have a habit of treating most things they do not understand in this
manner, the recent job advertisement by MIS (see page 63 .<'•'« ) brought out the
very worst in ’James Bond’ style espionage jokes and comments!
Thanks for all vour comments. Thanks also to Shortwave Magazine for publishing
our address and details in response to a letter from Ian in Ayrshire - “I found the
programme very interesting, especially seeing an old valve receiver used for
listening for these stations. It’s ironic that old technology is being used to listen for
old cold war style spy stations "
An finally in response to lots of requests, the receiver in use was an Army ’52 set’
1944. The ’Spy’ set in the background was MK 122- Variant)- 25 watt transceiver
used by the British until the 1970s as part of the Stay Behind comas. The 2nd
’Spy’ set was MK128A, battery operated TRJw output, as used by Mercenary
Forces and ’Insurgents’ for destabilising operations backed by HM government. All
3 sets are in mint condition and in full working order.
37
THE CZECH STATIONS (continued)
Having dealt with the better-known Czech stations, we'll now
start on those with less conventional habits- The most well-
known of these is SI7; the others are decided ly elusive and
hardly ever reported - 518, S19 & 527.
S17 is often referred to as a 'control' station, as it
operates daily, and sends minimal information; its message'
element consists of a single non-random 5fig group* Format is
almost identical to that of M10 or S10C. The call never
varies nowadays, and commences at 1455s "555 555 555 31o 313
313 05". At 1500 the preamble is sent: "313 313 313 42 42 05
05 Pozor! Pozor ! " . The 5fig group is then sent ten times,
followed by the ending: "Pozor! Pozor! 42 42 05 05 Konec
Konec " .
This format doesn't behave according to the rules of M10 &
S10C, however . The ID (313), Decode Key (42), and Group Count
(05) have remained the same for several years now, the only
variable being the 'message' group- The GC should be 01, as
there is only ever one group- Either it's a very long-running
error which has never been corrected, or - unlike this
position in M7/M10/S10 - it isn't a GC at all but refers to
something else. (Unlike many stations where GCs of less than
ten are given in single digits, the M10 family use two
figures, the first being zero).
However , things haven't always been like this with 517. hop
instance, in July 1993 (my earliest log) it was sending:
••555:998-02/42" Here not only the ID is different, but also
the GC & DK appear to be transposed, and the GC is 02, not 05!
(Annoyingly, I didn't record whether two, 42 or a single group
followed. It would seem that that everything external to the
'message' is now redundant and a mere relic of earlier times
when it once would have had a role) -
At that time it was using 5311kHz. By October 1994 it was
using its present ID , DK & GC(?) on 7882kHz. By 21.11 it had
moved to 6974kHz where it remained until 31.12. In January
1995 it moved again to 4485 . . ...
//5027kHz where it has remained ever since. Parallels
probably existed for 5311,6974 & 7882. In England reception
on 6974 at that time was very good. The present choice of
f reqs tend to give poor reception here. There c p ul_d be
another daily transmission, for in 1994 it was logged at 2325
on 5616kHz sending two sets of CNs "555 555 555 % 555 555
555-..." It was also heard in December of that year at 2000
on 5530kHz-
Messages, so-called, are not random, and can be divided into
three elements: the first two, the third and the last two
figures. The third figure is always (?nearly always) a zero
and^, if so > serves no function. The first figure is related to
the neat and is usually in the 5-8 range. The fourth is
probably related to the fifth and is usually 2. Often the
last pair is 00- Here's an example taken aver a 31 day
period: 67042 (3 days missed) 70022 (6 missed) 67000 69023 (5
missed) 64000 66025 (1) 68000 (1) 67025 68021 66000 67000
67000 (1) 68026 68024- This is typical. Slow cycles may be
detectable in the overall distribution of first figures over
long periods. More analysis is needed before we can come up
with any further 'rules'. Anyone able to monitor this station
on a long-term daily basis could provide us with useful
information. Any ideas about the possible purpose of these
transmissions would also be welcome,
S19 & 19 we will deal with together - not because they have
similar roles, but because they are both extremely infrequent.
They are so rare that virtually no complete logs exist. Logs
such as "Czech male, ends 'nula nuia nula'" are woefully
inadequate, and most f rustrating i I have heard this slow
'gravel-voice' on a few occasions over the years, but always
either Just finishing or in mid-flow. As such, no complete
format exists, so we can only surmise and compare with well-
known Czech stations. The division into S18 & 17 is itself
rather arbitrary, as there are possible variants to consider
also. With so little to go on, it's difficult to classify its
habits in any way at ail.
518 is the 3fig/5fig 'type'. I heard this once only on Wed
27.9.73 at 1030 on 7498kHz sending; "059 057 059 4732? 47329
77329" for 5 minutes followed by 30 seconds of H7~type rapid
dashes. M39 operates an identical format, and this could have
been the last of an M3?- type cycle. It could have been
replaced by M39. See 1439 in horse news - this issue.
519 is probably a male equivalent of S17 - if so, why the
need? I logged this on 27.9.93 at 1900 on 3323kHz sending the
call: "222 222 222 698 698 698 05" Due to very bad conditions
I was unable to copy whatever followed, but within a couple of
minutes the carrier went off, so presumably a single group was
repeated a few times.
S19A is a variant of the above. I logged this one on 3.11.93
at 0700 on 6.35MHz approx, (receiving on the famous "Here &
Now" 52 set!) It sent 5 minutes of "888 888 888 255 255 255
000" followed by a S19-type transmission : "888 888 888 018 018
018 05" (R5) followed by very few 5fig groups. (QRN this
time ! )
Apart from these three logs I've heard this elusive voice a
few times late at night in the 3/4 MHz region -always either
just finishing or under very bad conditions! Very occasional
logs continue to trickle in, the most recent one being on Mon
2nd June, ending 2100 on approx 4.6hHz.
S27 is a newcomer, to ENIGMA at least. It is briefly covered
in Voice Station News in this issue. It uses AM, and a new
(to me) Czech female voice, with slightly different
39
pronunciation of certain numbers. As it uses variants of
complex format I intend to cover it fully in the next issue;
it needs its own feature- Meanwhile, please send in any
laggings of unfamiliar Czech voices- (They need to be as
detailed as possible, otherwise they are next to useless- If
you cannot transcribe numbers in Czech, make a tape recording,
and send it to us). This new station is definately connected
in some way with M10C, which has recently become active
(?again). There has been an upsurge in unusual Czech
activity, paralleled by a general reduction in Russian
activity. What can all this mean?
**%***%**%*******************%********************************
[continued from page 2$ 1
...closely linked to certain intelligence agencies. We will
cover this in greater depth in a future article.
Until somebody can convince us of the innocence of these
things we'll continue to cover them.
There's been a major development in the cluster bands. "S & C
have been operating alone for many years in these bands.
They've now been joined by a P' , which is dominant in
England, (especially in the lower bands) Although still a
shadow of their former glory, when numerous channels within
these bands would sometimes be occupied, several extra
transmitters have been brought back into operation to provide
the new 'service'. The lowest cluster and only unreliable one
( 455 A) seems to have been inactive since April. Again, i feel
I must remind you, this new 'P', being part of a cluster, has
no connection with other, non-cluster, 'P's. (It just happens
to be the same letter). The latter variety have also been
quite active recently on the usual 4031, 5880//6935kHz , and
also on new (?) freqs. of 5110 and 5863. They are behaving as
they always do, in their possible naval capacity*. Lastly, we
have the old faithful solitaries: 'R', 'V' & L' (chirpy as
always). No significant changes to report. 4325kHz may not
be active at present (bad FSK GRM here), but then it was never
as reliable as 3323//4196. seems settled for now on 3174,
and L', most reliable of them all still chirping away on
3091 kHz « For a while in April/May another 'V' (regular
spacing) appeared on 4647kHz, a new freq.
MESSAGE ANALYSIS Due to lack of space a feature analysing a
particular G4 message has been temporarily withdrawn. Thanks
to Andreas (Germany) we have a computer programme for basic
message analysis, which we can supply to anyone who may be
interested. Please contact us if you'd like a copy-
4 °
THE LIFE AND TIMES OF CYNTHIA
"Voice Of America"
A look at European Operations
Part One.
Written by P.S. in Saffron Walden with additional material from ENIGMA readers.
| INTRODUCTION: The newcomer to the numbers scene soon comes to recognise
certain voice stations which are heard on a regular basis; one of the most distinctive
of these is the English language counting station, which has a female voice with a
distinct American accent speaking five figure groups. She has been around certainly
since the 1970s at least; she can be heard on any day of the week; she has been noted
in the early morning, around mid-day, at various times in the afternoon, and during
the evening.
I first became aware of this particular lady towards the end of 1990; I was not all that
interested in numbers stations then, being more a fan of the radio-teletype
transmissions from the various news agencies which were still using HF RTTY. As I
tuned around looking for the characteristic frequency shift carrier of teletype in full
flow I would often come across this American lady who seemed to speak only groups
of numbers. The transmissions were usually veiy strong, often almost as strong as -
and in a few cases stronger than - many AM stations in the shortwave broadcast
bands. Since she seemed to be on the air every time I tuned around in the evenings,
and it was clear there was a definite schedule with regard to the day of the week and
the time of day, so I decided to keep a log of her activities. I have continued to take
an interest in her ever since and my observations form the basis of this article.
3 FORMAT: For those not familiar with the lady in question, a description of the
format might be useful. Transmissions begin on the hour,*her time-keeping is usually
pretty good, starting within a second or two of the hour indicated by a watch set up
against the Greenwich "pips", although in the past she has been noted on a few rare
occasions starting up to half a minute or so early or late. She speaks a three figure
call which is repeated three times followed by "1234567890"; this continues for ten
minutes. At ten minutes past the hour ten one-second bursts of audio tone are sent
and she says "count" followed by a two or three digit number; this is then spoken
again as is the number of five figure groups forming the encoded message which will
follow. The message is then spoken, and there is a distinct pause between the third
and fourth figure so the groups might more correctly be described as "three plus two"
figure groups rather than five figure. This done, she says "repeat", followed by "count"
and its number, again spoken twice, and the message is spoken a second time, finally
finishing up with "end". (* nearly always - Ed)
§§ MODE: The mode of transmission is a little unusual; it is upper sideband with
carrier, or to put it another way AM but with the lower sideband suppressed
whichever way you want to look at it. It can be copied quite well on an AM receiver,
provided the signal is reasonably strong, but sounds much better with the receiver in
USB mode especially if the signal is weak or if there is co-channel interference as is
often the case these days.
41
Once the transmission has ended, the carrier usually stays on for a few minutes at
least; this has a characteristic background noise which is difficult to describe but is
very distinctive and soon comes to be associated with the American accented lady.
The "engine" noise does not seem to be quite as common as was the case a few years
ago but carriers are still noisy. The use of USB is becoming more common.
g FREQUENCIES: A variety of frequencies used by this lady over the years ranges
from 4007 kHz at the lower end of the I IF part of the spectrum to 29790 kHz -
almost VHP - noted in use on Sunday afternoons during the winter of 91/92. At times
the choice of some of the frequencies used is rather strange; for example at the time
of writing a couple of her favourite channels are inside internationally agreed
broadcast bands with consequent QRM from strong broadcast stations making copy
extremely difficult for the numbers enthusiast, the use of such frequencies perhaps
suggests that the intended recipient may be outside the European target area.
Perhaps the strangest choice of frequencies was also during late 1991 and early 1992
when she was noted using a couple of frequencies in the 27MHz band resulting in
mutual QRM with the Spanish and Italian kilowatt CBers which infest that part of the
dial when conditions are right. In order to ensure the message gets through, usually
two - and on a few rare occasions three or even four - frequencies running in parallel
are employed, which are typically two or three Megahertz apart, and even where we
are only aware of one there is no doubt another one somewhere which we have not
been clever enough to find ! A compilation of all the frequencies used by this lady
over the last seven years gives a
total not far off 100.
jg AGENCY: So perhaps at this point we might take a few moments to consider on
whose behalf this transatlantic temptress works so hard. Perhaps there is clue to the
answer to this riddle in the nickname by which she is affectionately known to her
followers; whereas she is referred to in the ENIGMA Newsletter as "English
Language Counting Station E5", she is know to her followers by the much more
romantic sounding name of CYNTHIA i Why ? weii, perhaps because her voice is
sampled or svnthesisized by computer techniques, but if we take the first letter of her
name together with the last two we have the initials of the intelligence organisation
who are her employers, and who have their head office in Langley, Virginia, U.S.A.
This is not to say that when we hear her she comes to us directly from a site up the
Potomac River from Washington D.C.; to be heard as strongly as she is on this side
of the Atlantic she must be relayed from transmitters in Europe located in countries
friendly to the United States.
g LOCATIONS: The whole subject of transmitter locations is made more difficult
with this particular station due to its worldwide coverage and reliance on host
countries. We will start with the mainland United States and work towards Europe.
UNITED STATES - Warrenton, Virginia
CENTRAL AMERICA - Panama
FAR EAST - Guam
- Japan
41
- Australia-
- Diego Garda
AFRICA ■ South Africa Ascension Is.
ENIGMA has learned that the CIA have now established facilities in South Africa
which are ’classed’ as their African HQ following the demise of the Liberian
operations centre.
EUROPE - England
- Germany
- Spain
- Portugal
- Greece
- Turkey
- Morocco
1 OTHER FORMATS (’CONTROL’ TRANSMISSIONS): As well as the frequently
heard 5 figure transmissions, our Cynthia has also appeared on the air in another
form (E14). At one time she could be heard daily with transmissions of ten minutes
duration in which she spoke a short message of four figure groups, usually two or
three 4 figure groups, occasionally four or five - even six or seven have been noted.
These 4 Figure transmissions went out several limes a day, unlike standard messages
these particular transmissions always started on the half hour. The first one of which I
became aware was in late 1992 which used to start at 17.30 UTC on two frequendes
in parallel, 5205 and 8560 kHz. These were usually very strong signals, especially the
5205 kHz outlet; the typically noisy carrier would be on some time before the start of
the voice - 1 recall one Saturday afternoon when the carrier appeared on 5205 kHz a
good two hours before transmission time ! *
At exactly 17.30 UTC ten short audio tones would be sent and Cynthia would go
straight into her 4 figure groups; these would be repeated over and over for ten
minutes and then she would stop. By the middle of 1994, a third frequency had been
added to run in parallel with the existing two, 12285 kHz so we can assume these
short 4 figure messages must have had some particular importance to be given so
much in the way of transmitting resources. Also at about this time there were 4 figure
transmissions at 07.30 UTC and two separate 4 figures, each using two frequendes in
parallel, at 13.30 UTC, with further 4 figures at 00.30 01.30, 06.30 & 07.30 UTC.
Reports from the United States indicated that the same format was also running in
Spanish at 00.30 02.30, 10.30 & 18.30 UTC. However, both the English and Spanish
language (V14) transmissions are no longer in existence having left the airwaves
towards the end of 1995 - by which time the 17.30 UTC had moved to 11072//13465
kHz-no doubt having served their purpose, whatever that may have been !
jg GERMAN LANGUAGE: It is worth recalling that at one time there was also a
German language (G5) counting station which used the Cynthia format, and all the
evidence was that this was operated by the same organisation. This was a rarer find
than the American English version, and the German language version was regularly
noted from the mid-1980’s. The style was exactly the same, a three digit call spoken
three times followed by "eins zwo drei vier funf sechs seben acht neun null" the
*(beginning & end groups in these msgs. were not Indicated. Their sequence
could have been significant, however -Ed)
- Barford St John, Oxfordshire.
- Frankfurt area.
- Tatoi and Nea Makri near Marathon
German for "5" was pronounced "funf in contrast to the "funef of number stations
whose origins are more to the east, after ten minutes of this, ten audio tones and he
word “gruppen" followed by the number of 5 figure groups to follow, this repeated
and ten L» .he message. In .he ENIGMA sound archn.es vn^ave tope , .of a vo,
" " z
operations during 1995, another victim of the ^undtun^tou^t^out by^te end
f thn War* mV own last losing was in March of 1995 on 67o0//v z?
ZZ22Z szSr . » - — * rs:
the German version it is worth recalling an event from early m 1995, on Sunday
afternoons there was a well established slot for the German language version on 9070
, w . lJTC . 1 checked it out on a couple of Sundays during January, however
Z:\ Z o^Febtumy, the German YL had been replied by Qmihta,
and she turned up on Sundays at 16.00 ever since.
m up AMISH IANGUAGE: The CIA have not restricted themselves to just American
!a Sl established Spanish ianguage network aiso crisis, and »
..f • r V cv ^though primarily these transmissions are not well received m
*11 actn/e (V5), rfteug pmany^ in North America for
-eXin te Snttal and sinlh American region, an at*i>hidt the USA mairtens
Snsiderable interest. We are primarily looking « Europe* 1 1*"**"- “ tt,,S fM '“ re
so 1 will not expand on the Spanish language activities at this time.
a fno11sh ACCENT: You will have also noted that we have used the term
bNGL.„ _ _ 9 Well, there is also an English accent version or
le'ry Tre iti'indeed and was last heart eaiiing '250’ with a 102 group message on
March 9th 1995.
„ part two of our look at Cynthia - * be completed in issue 14 of ENIGMA »e wiii
be looking at -
digital transmissions
JAMMING
MISTAKES
TEST TRANSMISSIONS
SCHEDULES
MESSAGE LENGTH
AND A FULL SUMMARY - Don’t mi:
part two.
4-4
SIMON MASON WRITES. . .
All times are UTC.
Hello again and welcome to another column in the ENIGMA newsletter.
H First some E10 "strings” heard recently:
6598
20.45
NDP-V
4604
21.30
ROV-E
5530
16.30
MIW-16L46
4604
19.10
ROV-B
6745
16.45
VLB -1646
4604
19.20
ROV-P
4165
20.45
VLB -50L1 7
4604
19.00
ROV-X
SYN-C & S also noted recently
One interesting point here is that there is a notable similarity between MIW16L46
and VLSI 646, although unfortunately the MIW station was broadcast on 28
February 1997 and the VLB string was sent on 18 March 1997, so earlier theories I
have seen regarding the connection between the string numbers and the date look
rather suspect in this case.
Station ROV seems to be another new cali-sign which sends no traffic; it was first
noted on 27 March and to date 4604 kHz seems to be the only frequency
discovered. More on El 0 message strings can be found in part two of our special
feature in this issue.
■ Next, some monitoring information, courtesy of Gerry Dexter in the U.S.A.,
regarding the mysterious "New Star” station in the Far East. Gerry says, "the
forever mysterious New Star Broadcasting station (-which some experts say
broadcasts from the Chinese mainland and others believe is in Taiwan), continues
to be reported on occasion in North America, after a very long time during which
there seemed to be no loggings of this at all. 8300 kHz appears to be the most
widely heard frequency, perhaps because a signal is more easily spotted there
than on 9725 11430 12750 13750 & 15388 which have recently been reported. The
station doesn’t seem to adhere to any specific schedule, but is active anywhere
during the period from around 09.00 to 16.00 or 17.00. The 12.00 to 14.00 period
offers the best chance for North American listeners to pick this one up. The
broadcasts are short, lasting only a few minutes and consist of number groups in
Chinese and some Chinese music. It would seem to be some kind of
government-run ’spy’ transmitter though, again, no one has definite proof as to
which China it belongs to, needless to say New Star broadcasting station has
never been QSL’d”.
'The still myt&rious, always fascinating, New Star Broadcasting station (Xin Xing
Guangbo Diantai) is still being heard periodically. Recent reports received at
ENIGMA suggest that at 14.00 the station is audible in Europe on the most popular
frequency 8300, airing 4 digit groups in Chinese with a flute interval signal, more
45
of the same can be found at 1 5.00. Listen out also on 8300 9725 1 1 430 1 2750
13750 & 15388, some of these are seemingly alternates rather than parallels.
Several women do the reading of what are presumed to be coded messages in
Chinese."
Hans van den Boogert writing in ’DX Window’ DSCI June this year reports several
previously uncovered facts about New Star. Hans found an article from the
Congressional Research Service called "Report for Congress October 1,1992 -
China/Asia. Broadcasting : "Proposals for New U.S. Surrogate Sen/ices" written by
David A. Hennes, Analyst in Foreign Affairs at the Foreign Affairs and National
Defence Division, it dealt with broadcasting to China and the rote Voice of
America would play in it. We aii know the result, as Radio Free Asia is a fact now.
But in the appendix there is an interesting paragraph.... At the end of Table 2 are
several "clandestine" broadcasting services, all reported to be broadcast from
Taiwan. Taiwanese officials did not confirm the existence of these stations.
Stations were listed showing the number of hours each was broadcasting - New
Star Broadcasting was listed although the source of the list which showed 4
unofficial stations could be assumed to be official information intended to be read
and discussed by U.S. Congress.
Hans also wrote to the BBC Monitoring Service based at Reading. The reply was
rather non-committal “ I'm afraid we don’t have much information on the New Star
station. It’s not the sort of thing we normally monitor as it appears to be a coded
numbers type of operation rather than clandestine broadcast station. We did
investigate it with the help of some Japanese DXers in 1989 when it was thought
to be based in Taiwan and aimed at China - but i suppose it could also be the
other way round. As to its purpose I really have no idea! Dave Kenny, BBCMS".
H Next, an appeal on behalf of Don Schimmel who asks for information on the
Soviet station RTZ, Don writes: "I am seeking information on a station active during
WWII and into the late 1940s which used the call-sign RTZ. It is believed the
station was located in Russia and the transmissions were in high-speed Morse
code, it is not know if this was a Soviet Military or KGB controlled activity. It
evidently had no connection with the Time Signal station RTZ which came into
being at a later date." If you have any information on RTZ please write to us at the
ENIGMA office. Thank you.
H An unusual incident occurred on 28 April 1997 during the daily Russian man
transmission (S25) on 11270 kHz at 08.20 UTC. As usual there was the 615 call
up; 615 615 615 43497 43497 43497 from 08.20-08.30, then 615 615 615 41577
41577 from 08.30-08.40 and closing with 615 615 615 00000. However, in the
background continuously was CW station with a hand keyed "VW WV VW DE
UKU" the hand keying was to say the least, not very good! I cannot find any record
of this particular station in any reference work, but obviously it is suspected to be
Russian in origin.
■ in a future column i will be introducing 'Ten Years Ago This Week “ a section
where I will look at the pages of my log-book from ten years ago.
With the return of full length messages from S10) - the old so-called “Bulgarian
Betty" station and English language voice station El 8) returning from the grave
the need for Numbers Stations in the ’hi-tech’ age continues !
H Staying on a similar theme, cue the fanfare and drum-rolls: a new G16) German
language Two-Letter station has appeared along with a new El 6) station in
English. All this when the signs were that this set up was dying a slow death,
activity has picked up somewhat. GOLF KILO pitched in on 1 8 March at 21 .30 on
5284 with 856/39 and 846/61, a combined total of 100 groups, the same average
traffic that these stations had in their heyday.
WHISKY LIMA is still a regular and was heard on 8 June at 10.00 and should be
using 1 2092 every Sunday in July at this time. MIKE DELTA is very much more
active and can be heard every Tue/Thu/Sat/Sun at 09.00 and either 13.30 or 14.00.
It is currently using 11545 12210 12314 13775 13890 14622 16220 and 16414 in
various combinations of months and days.
The big news is the appearance of a new station in the German language called
FOXTROT ROMEO which was heard on 13890 at 09.00 on Sunday 8 June in the
background (foreground ?) of the regular MIKE DELTA transmission. It was
definitely stronger than MIKE DELTA and one suspects that it could be either a
regular transmission usually sent on another frequency at the same time but
similar in output or location to the NOVEMBER QUEBEC station heard in the
U.SA or a new call-sign which on this occasion mistakenly sent on the wrong
frequency. The identifiers used were 565 for MIKE DELTA and 043 for the new
FOXTROT ROMEO which incidentally was previously used by the German
language station ALPHA LIMA.
Following the discovery of FR a further Two Letter station this time in English was
noted, DELTA ROMEO was heard on Tuesday at 07.00 on 12210 with a 'message
for’ 131- sending 87 groups. 131 is an old identifier previously associated with
PAPA LIMA.
This activity however has to be put into some context. In August 1994 there were
still 16 call-signs in use namely,
VO SB KWHKAU JW OA RD GK MD CD BN CN WL DA & VI.
By February 1996 the number of stations was pared down to just 6 call-signs,
GK SB CD MD WL & HK.
By June we were holding on at the very edge of ’ENDE’,
GK MD WL & the short-lived OK were holding this previously huge operation
together.
At the time of writing, we have,
47
GK MD WL FR & DR (The rare AU is still around using 4821 //4888 and 8370
H Some news from around Britain now. intelligence scoops by British spies are
now flashed to special computer terminals around Whitehall. The security and
intelligence services have been linked to government departments by an encrypted
electronic messaging system. The three security and intelligence agencies - MI6,
MIS and GGHQ, - have been linked to the Ministry of Defence, the Foreign Office
and the Department of Trade and Industry.
MI5 are not alone in advertising for staff. An Information Technology Security
Instructor is required at The Defence Intelligence and Security Centre based at
Chicksands in Bedfordshire. The role calls for a person to assist in the
development of, and lecture on, all IT Security Courses run by the Branch; liaising
with UK intelligence and security organisations. The post is open to UK nationals
only. (Incidentally, this site includes many interesting new features - firing range,
’psyops’ section, ’Special Comms. Training Section’ etc. Eds).*
Perhaps your skills are more linguistic ? The (Government run) Recruitment &
Assessment Services are seeking linguists based in central London. A degree in
Chinese, Arabic or Persian, with a proven ability in comprehension and translation
is required along with a knowledge and understanding of the culture and current
affairs of the areas where that language is used. For these appointments British
citizenship is required.
And last but not least, Britain is setting up an international telecommunications
tapping system with its EU partners in cooperation with the FBi. The agreement
covers telephone and written communications - telexes, faxes, e-mail and
satellite-based telecommunication systems, it looks like number stations will be
around for a while yet!
# That just about wraps things up for this time, so in the words of New Star
Broadcasting - "Zaihuf, Good-Bye, until the next issue and my best wishes to
everyone.
IN THE NEXT ISSUE OF ENIGMA
Part Two of our E3 feature on Lincolnshire Poacher
Part Two of our E5 feature on The Counting Stations
A look a the legal position of listening to Number stations.
Plus all our regulars - Letters, Morse & voice Station News, ’Buzz’.
Letters logs news, clippings and information would be appreciated to arrive by
Friday November 28th 1997. The next issue of ENIGMA will be published
Mid-January 1998.
(* Disc's logo consists of a gothic arch surmounted by a rose. The rose
traditionally symbolises secrecy, as in "Speaking under the rose . Combined
with an arch the .symbolism is associated with secret societies. The arch
features in the higher degrees of Freemasonry, i.e. Royal Arch Freemasonry Eds)
E3) LINCOLNSHIRE POACHER. A special report.
Part 1 .
UTC MON TUE
10 H 16084/15682/14487 D 16084/15682/14487
11 D 16084/15682/14487 H 16084/15682/14487
12 F 16084/15682/14487 F 16084/15682/14487
13 I 16084/15682/14487 I 16084/15682/14487
14 B 14487/12603/10426 C 16084/14487/11545
15 A 15682/13375/11545 B 10426/8464 /7755
16 H 13375/12603/11545 A 15682/13375/11545
17 C 11545/ 8464/ 6959 H 13375/12603/11545
18 F 12603/9251/7337 C 9251/ 6959/ 5746
19 E 12603/9251/7337 1 11545/9251/6959
20 X 11545/9251 /6959 F 12603/ 9251/ 7337
21 D 11545/9251/ 6959 £12603/9251/7337
22 C 11545/10426/6959 011545/9251/ 6959
WED
H 16084/15682/14487
D 16084/15682/14487
F 16084/15682/14487
X 16084/15682/14487
D 16084/15682/14487
C 16084/14487/11545
B 10426/ 7755/ 6485
A 16475/14487/12603
H 11545/9251/6959
G 8464/ 6485/ 5746
I 11545/ 9251/ 6959
P 12603/ 9251/ 7337
€ 12603/ 9251/ 7337
THU FRI
10 D 16084/15682/14487 H 16084/15682/14487
11 H 16084/15682/14487 D 16084/15682/14487
12 F 16084/15682/14487 F 16084/15682/14487
13 I 16084/15682/14487 L 16084/15682/14487
14 £ 16084/15682/14487 F 16084/15682/14487
15 D 13375/12603/11545 E 13375/12603/11545
16 C 14487/12603/8464 D 13375/12603/11545
17 B 8464/ 6485/ 5422 C 16084/13375/11545
18 A 16475/14487/12603 B 8464/ 6485/ 5422
19 I 11545/9251/6959 A 15682/13375/11545
20 H 11545/9251/6959 <1 11545/9251/ 6959
21 G 9251/ 6959/5746 H 11545/ 9251/ 6959
22 F 12603/ 9251/ 7337 G 9251/ 6959/ 5746
SAT
H 16084/15682/14487
D 16084/15682/14487
F 16084/15682/14487
1 16084/15682/14487
Sl 14487/11545/10426
F 13375/12603/11545
£ 13375/12603/11545
D 13375/12603/11545
C 16084/13375/11545
B 8464/ 6485/ 5422
A 11545/10426/6900
I 11545/9251/ 6959
H 11545/9251/ 6959
SUN
10 D 16084/15682/14487
11 H 16084/15682/14487
12 F 16084/15682/14487
13 I 16084/15682/14487
14 A 16084/15682/14487
15 H 13375/12603/11545
16 G 11545/10426/8464
17 F 13375/12603/11545
18 £ 12603/ 9251/ 7337
19 I 11545/9251/ 6959
20 D 11545/ 9251/ 6959
21 C 9251/ 6959/ 5746
22 B 8464/ 6485/ 5422
This special four page report shows the
full weekly operating schedule and includes
all frequencies and scAawfote,; identif-
cation.
Part 2. in issue 14.
49
FULL ANALYSIS OF SCHEDULES
Full analysis of the weekly breakdown A to I reveals some
interesting patterns of just when each recipient is tuned in.
M TW T F S SN M T W T FS SN M T W T F S SN
10
11
S ©
14
15 4-
16 - 4 -
1? : 4
18 . -f
19 ~ 4
20
21 — —
22
0
4- 4
4
M TW T F S SN M T W T FS SN MT W T F S SN
10 X X X
11 X X XX
12
13
14 •
15 4
16 4
17 4
18 ” —
19 _w—
20 C -« 4
21 4*
22 4 -
0
x X X X X x X
£
+
M TW T F S SN
10
11
12
13
14
15
16 +
17 4
18 4
19 4
20 - — —
21 4
22 4
M T W T FS SN MT W T F S SN
’'x',- ‘"a (I)
©
4
x x X X X X X
f
I ! 8 I
# 4 X
Total transmissions 273 per week. Special thanks to Andreas and all ENIGMA
readers who send us E3 logs.
5o
1400 commencement of sliding schedule (H - 1500)
subsequent sliding schedule slots
fixed schedules! daily or alternating
time slot excluded from sliding schedule
TOTAL TRANSMISSIONS PER WEEK
Lincolnshire Poacher transmits 273 X 45 minute slots per week. These messages
are sent out to 9 separate headers which we have titled A to I.
FREQUENCY USAGE PER WEEK
The station uses a total of 17 frequencies, some are scheduled more than others
as we can see below.
Frequency usage per week.
16475 number of uses 2
16084 number of uses 35
15682 number of uses 35
14487 number of uses 39
13375 number of uses 15
12603 number of uses 22
11545 number of uses 36
10426 number of uses 7
9251 number of uses 26
TOTAL TRANSMISSIONS PER WEEK 273 70% AT + 10 Mhz
30% AT - 10 Mhz
WEEKLY SCHEDULE
. '
l A to ft.
UTG
MON
TUE
WED
THU
FRI
SAT SUN
10
H
D
H
D
H
H
D
11
D
H
D
H
D
D
H
12
F
F
f
F
P
F
f?
13
I
I
l
1
1
1
L
14
ft
e.
D
€
F
G
A
15
A
ft
C
D
£
F
H
16
H
A
ft
C,
D
E
G
17
g
H
A
ft
C
D
f
18
E
G
H
A
ft
C
19
£
I
A
l
A
0
i.
20
I
E
1
H
1
A
D
21
D
E
F
G
H
1
G
22
C
D
E
F
6
H
«
8464 number of uses 9
7755 number of uses 2
7337 number of uses 8
6959 number of uses 21
6900 number of uses 1
6485 number of uses 6
5746 number of uses 5
5422 number of uses 4
Total weekly usage 273
S3 LINCOLNSHIRE POACHER
Mse Group
Time slot
Time slot
Earliest transmission (1400)
Number of daily
Number of messages
Significant
1C -1300
14-2200
of sliding schedule commences?
transmissions
per m.p.
freq, use
A
-
S All exc 21 & 22
Sun {uprfeo 2 $60)
1
1
10+
B
-
S All exc 20 & 21
Mon
1
1
«10
C
-
S All exc 19 & 20
Tue
1
1
D
Alt 10/11
S All exc 18 & 19
Wed
2
1-3
E
-
S All exc 17 & 20
Thu
1
1
F
Daily 12
S All exc 16 & 19
Fri
2
1
G
-
S All exc 15 & 20
Sat
1
1
-10
H
Alt 10/11
S All exc 14 & 19
Sun (from 1500)
2
1-3
X
Daily 13
Alt 19/20/21
-
2
1-6
*10-1300 used only by D,F,H & I. All on same freqs.: 16084//15682//1448? I's later trs always use 11545//9251//6959 only.
S « sliding schedules - used by all message groups except I - operate in 14-2200 time slots. p&s of these slots available daily,
but only seven used per message group, (one for each day of week) Of the two omitted, at least one is from the 5.9-2145 period.
This is due to the needs of the anoroolous I message group. All sliding schedules (except A) end at 2245.
F sends two daily tra despite its single message per m,p. This may indicate a high priority.
Assuming that the 10-1300 slots are timed for local lunchtimes, F, D & H would indicate Middle Eastern target area (UTC +3) and
I would indicate Britain. A' s freq use indicates longer distance than the rest. B & G short distance.
On Saturdays 1 uses 2100 in place of 'expected' 2000 (compare D & H Pri/SAt 10/1100); this is necessary ist order to maintain the
pattern of the A schedule in relation to B-H, (see diagram below)
TIM
E/MESSAGE GROUP
1000 1100 1200
SCHEDU1
1300
.XNG
1400
1500
1600 1700
1800
1900 2000 2100 2200
Commences 1400 ons
A
0
0
0
O
S
S
s s
s
S S
Sun
B
0
0
0
0
S
s
S 8
s
s
Mon
C
O
0
0
0
s
s
s s
s
^0 0 s
0^ s s
s
Tue
D
A~
—A
0
0
s
s
s s
X"
s
Wed
E
0
0
0
0
s
s
S 0 ^
s
S 0 s
s
Thu
F
0
0
D
0
s
s
o^s
s
<r s s
s
Fri
G
0
0
O
0
s
0^ s s
s
SOS
s
Sat
H
A
A
®
0
s
s s
s
s
s
Sun (1500)
I
O
0
0
D
0
0
0 0
0
A. A A
0
-
Kk&Vy
S •* sliding schedule transmission
A A = Alternates slot throughout
week.
D = Daily transmission (fix&o }
No transmission
0 »
m.p.
message period - see next
issue.
INDONESIANS IN PARIS?
by M«B« (research by I.)
The above title refers to the Numbers Station which calls
itself 8BY (M16) . It's one of those mavericks that chooses to
use bogus callsigns* In ternational ly , the 8B prefix is
allocated to Indonesia, however, BBY has its roots very much
in Europe, and is actually run, we are reliably informed, by
French intelligence. Along with P8K, UDE, EC3Y , C37A, 6XM8
etc it uses its callsign illegally, as it is not registered
with the ITU, nor could it be.
This station is not a typical 'text type' numbers outfit; its
format doesn't lend itself to sending messages of this type.
Nor is it of the 'control' types it's entirely in a category
of its own. It is an extensive operation, transmitting on
three parallel frequencies for 20 minutes, 24 times a day.
Always commencing its transmissions at h + 40, it may use any
three of the following freqs.s 7668 12075 (BC band * ) 12170
12282 14731 18415 20946. This selection - there may be others
- suggests a worldwide operation which does not include
Europe. Signal strengths on any particular frequency are prone
to wide variation from one hour to the next, which suggests
that particular time slots are beamed to different parts of
the world.
FORMAT As the short 'message' is repeatedly sent for 20
minutes there is no need for a call. It merely identifies its
illegal status by sending its callsign prior to every message
run'. These so-called messages consist of a number of three
figure groups - sometimes as little as two - separated by
stroke/oblique symbols in Morse. A typical example would bes
"VW 8BY 848/ 487/445/033/ 429“ (R20) Between two and twelve —
groups may be sent. These groups are not random, but are
chosen from a pre-arranged, systematically organised sequence.
Any one group always appears between two other sequentially
related groups, and never before the first or after the
second.
Messages appear to be in 'families'. As an example, the
family that contained on© or more of the groups 262, 306 & 095
-all of which are common to many messages - has been chosen
from a sample of loggings. Other groups appear between these
three groups. In a sample of 25 such messages, eight contain
262, nine contain 306 and eleven, 095 (and eleven, 958, as it
happened). Other groups that appeared between these key
groups could, on examination, also be placed in the sequence,
due to the frequency of the KGs.
Generally the KGs appear in the earlier parts of the messages,
whereas the tail-ends contain very few repeated groups, and a
large proportion of groups that appeared only once in the 25
message sample. Sequential positioning of these groups is
hence impossible. A few examples of this 'family' of messages
are given in the accompanying table. (All dates refer to
1994/'5)0n 6th January group 095 was placed out of SfequeBCe*
presumably in error. The use of 262 would appear to have been
curtailed after the end of 1994* but this could be due to the
randomly compiled loggings taken. Some KB msgs could also
have been missed. Alternatively, 262, if an agent, may have
gone on holiday*. It is possible that the KBs refer to
particular agents, and that the other groups provide some kind
of minimal message function, and may or may not be encrypted.
8BY is an extremely complex station, nothing like as
straight forward as it at first appears. More could possibly
be gleaned by long-term traffic analysis - any volunteers?
Thanks go to Ian (Dorset) for his valuable research into this
station .
[The French government seem to favour bogus callsigns, as
their MFA in Paris uses the non-ITU registered call P6Z when
communicating with its embassies abroad. These also use
similar bogus calls - e»g< V5G Bucharest etc. Other countries
use legitimate callsigns for this purpose. Why the French
hide behind this cloak of anonymity and do not conform to
international law in this respect, is a mystery. Perhaps it
is so that they can include their numbers stations within a
similar callsign structure - an attempt at concealing their
identity?]
In response to our appeal for information on the Stay Behind
Networks, we received some most interesting information from
two sources. (Many thanks - you know who you are! ) We're
still collating material and conducting further research, and
will publish at an appropriate time.
Could 'J' of Cheltenham please contact us. We do not have
your address, and have no way of contacting you. The material
you sent was of the highest grade, and was greatly appreciated
- quantity and quality is rare. It ties up several loose
ends, but there are many points that we'd like to discuss with
you, before we consider publishing anything yet.
SITES - We received a fair response, however, we still need
more people willing to research into this important subject,
especially in Central Europe. We'll provide as much help as
we can, and a free subscription to ENIGMA' We can also
provide you with constructional details of simple but
effective HFDF aerials and goniometers, and advice on DF
techniques. Thanks go to 6.F. , K.S., B.W. and D.Z. for
volunteering *
DZ - Pleas© continue corresponding by other means, iil/5/7
PQ - 505/9855 9047 7843 6632 9561 0647 9231 0503 4387 2316
7583 9076 8884 3426 8550 1310 4331 5672
509/111 by OMs U-Gorl, D-YorV
54.
THINGS THAT GO BUZZ IN THE NIGHT !
Welcome along to another Buzz page. Most of our old favourites are still around
and we will just give them a quick mention this time. There are quite a few other
signals up and down which are unknown modes, but the problem in reporting
them is that they will not sit still on one frequency, nor in some cases generate a
consistent reportable signal. I will give some of the regulars a rest after this issue
unless they make any significant changes or I have new information for you.
The main news this issue concerns further developments with the HAARP project.
^ HAARP - sadly issue 12 of ENIGMA was published just too late to tell you about
the first ’public' test transmission from the HAARP station. This was conducted in
the full media glare on Saturday March 8th to the following schedule.
Vertical beam
04.30
6990
Carrier only for 5 minutes
04.35
6990
Morse code message for 5 minutes
Beam pointing South East towards USA
04.40
6990
Carrier only for 5 minutes
04.45
6990
Morse code message for 5 minutes
Vertical beam
04.50
3300
Carrier only for 5 minutes
04.55
3300
Morse code message for 5 minutes
The test was conducted using 17 of the umbrella antennas and a power of 340
KW. By the year 2002 the facility will have expanded in two phases of 48 and then
108 antennas to a peak of - 180 antennas which will be fed by 30 transmitter
shelters each containing 12 transmitters of 10 KW each, this will give a total RF
power of 3.6 Million watts of power !
Ken in Doncaster who kindly sent me the information reported only poor reception
of the 6990 transmission, I don’t know if any other readers who managed to tune
in had better luck - please let me know if you had any joy and also received a QSL
card.
When the transmitter is testing there is a telephone number to call to report
interference - this will be manned during the tests. HAARP is supposed to operate
on a non-interference basis and must shut down in the event of interference
caused by the facility. The telephone number is 1907 822 5497.
The address of the HAARP facility is HAARP, PO Box 271 , Gakona, Alaska, 99573
or by E-mail at WWW. HAARP. ALASKA. EDU
HAARP remains controversial and the parties pro and con seem to be moving
further apart but whichever side you choose HAARP is certainly worth watching!
^4, THE PIP - This is still around on 3757 and S^o. it js audible mixing with RAF
Volmet on the latter frequency. Transmissions from the Iraqi-based Voice of the
Mojahed are heavily jammed from nearby Iran (pity they have to use so much
power) which makes 5450 sound like a faulty washing machine on full spin. I
doubt that RAF Volmet will sit it out much longer on this frequency. As for the PIP
still no location or purpose has come to light!
THE CRACKLE - Again no real news, I’m afraid. Still around on 5500/5505 also
6584 (same frequency as used by Backward Music station - but not at same time)
and also noted on 91 39 and 1 0270 occasionally.
THE BUZZER - Alive and well on 4625. Some interesting news from Mike in
Kent, on April 13th and April 20th (during very hot weather in Britain) Mike noted
not one but two Buzzer signals on 4625 around 14.00 and 15.00. The signals were
operating out of synchronisation and the second one was of a higher tone and
even weaker than the normal signal. I wonder if any readers have ever heard two
transmitters on 4625 ? Perhaps readers further to the East may be able to hear
something. Please let me know.
Mike also wrote to me about some other unidentified ’Buzzer like' noises on
frequencies high up the band. He mentions signals between 25500 and 27700
any ideas what these rasping sounds may be ? All heard during daytime hours in
early June.
BACKWARD MUSIC STATION - Very active on 6584 also noted on 5180 6695
6752 and 8984.
^ THE ECHO - This is becoming more elusive it was lost and recently found again
on 3876 but alas ! it has gone to ground once again.
FACERS - i guess some readers will be sick of me mentioning these. I am
always amazed at how busy they are, yet, seem to attract no interest or attention
anywhere outside the pages of ENIGMA, (thanks to Richard for the logs) Surely
someone must be able to break this one - what are they - where are they - who
are they? Help!
I will give the frequencies again -
3191
4023
5090
6505
7387
9125
10142
The signals normally operate
3217
4062
5110
6796
7500
9138
10480
in 7.5 second bursts making up eight
3382
4457
5195
6825
7658
9225
11100
bursts per minute exactly. The distinct
4478
5313
6848
7813
9245
11517
rasping’ sound is quite wide consisting
4406
5328
6878
7997
of a multi-channel FM signal operating at
4563
5400
13431
500 HZ 1 100HZ 1400 HZ 2kHz 2.6 kHz
4845
5468
3.4 kHz
5788
That's all from Buzz, this issue - please keep
sending your reports. Thanks.
ei o h
— ■ i t, rn
■vo
?HCK ISSUE 12
So where do we go from here ? Well, I must admit that Langley Pierce
had the right idea when he tackled the subject in his book ; he
concentrated on just 6 callsigns and headed everything else special
broadcasts'. However I am not going to follow this route and at the
risk of producing a long article intend to give you all the known
facts.
A little earlier I mentioned the habit of throwing all the callsigns
together under one heading- So now I would like to break the stations
down into the three headings.
Before doing so I feel it is worth mentioning that I am dealing with
the present operating position. Going back to some of those
unconfirmed callsigns will likely confuse both you and me I
The following is based on monitored information received from ENIGMA
readers and our own efforts.
Three station types.
1) High traffic stations Day to day operations ?
2) Low traffic stations General alert transmissions ?
3) Non traffic stallions Deep cover /miss ion specific ?
Lets look at each type and its particular habits.
1) High traffic stations. These are perhaps the ones you hear most
often and follow the standard message operating format described in
the example of VLB at the start of our feature. Stations of this type
have a regular schedule and follow predictable time lines.
Type one stations are ART EZI FTJ JSR KPA PCD SYN ULX VLB & YHi
( & the now defunct GPO )
2) Low traffic stations. These stations do not send regular standard
messages but do still maintain a regular schedule. These appear to
have a different purpose to type 1 stations.
Type two stations are CIO & MIW
3) Non traffic stations. These stations are somewhat more difficult to
pin down and do not seem to send any standard traffic messages, ihey
also do not appear to have a set schedule and finding them is more a
matter of luck than of judgement.
Type 3 stations are BAY GBZ OEM NDF TMS ZWL & RCV
Having now identified the 3 types of station it is possible to move
onto traffic analysis. This is perhaps the most enlightening part Oi
the mystery.
Type 1 stations are the 'bread & butter of the communications system,
sending out a seemingly endless number of rota style messages. It is
not possible to ascertain whether traffic is sent for individuals or
groups but messages do stay on the system for a period of time and
would appear to be repeated until such time that HQ is satisfied that
they have been received.
Type 2 stations do not send regular traffic and are prone to long
periods of idling followed by bursts of activity. The purpose of CIO
and its sister station MIW are of course unknown but monitor ing would
suggest that these two stations are some type of general alert
and may serve to communicate more blanket information m . e orm o
both traffic messages and special message strings.
Certainly in the case of both callsigns, when traffic does occur it is
not unknown for a single message to be transmitted continuously to.
hours per day non-stop.
Type 3 stations are perhaps even more incomprehensible in nature and
could best be described as an inverted version of type * station
Type 3 stations have never been heard to seno tralf ?
Moreover they appear without warning and send peculiar message -*_r g~.
consisting of additional letters and numbers added to a repeating call
sign before disappearing into the wilderness until discovered agan
a bit of chance tuning.
Just before we move onto message strings it may well d>e received
a few lines about the phonetic code system. Some time ago we received
a report that the system used was call 'Aroflex' a crypto system of o
Letter groups developed by Siemens for NATO wide use. Any further
information on this would be appreciated.
It would seem unlikely that all field agents decrypt’ the «essa«e: s^by
hand and some in less sensitive situations would probably use
equipment similar to the Gretaeoder DH-26 hand-held encryption unit^
The equipment's algorithm assures maximum security with -0 '
power of 52 user selected code combinations. It is Ol couro. the -as.
that any agent found with such equipment in their possession would be
presumed guilty of clandestine activity.
Such equipment uses the triple key principle, An elementary key is the
first secret element and is periodically changed by the user himse.r^
A Combiner key is the second and independent secret element It
determines the encryption algorithm and may be reprogrammed
terms. An auxiliary key generated automatically by a rando * change
for each new synchronisation eliminates the need . .
to the elementary key without impairing the cyrptological security.
Not only would these be used to decrypt an incoming ^
units also have a Message Key which is used to generate
mathematical programme to encipher a message ready reel pient by
H Q. These messages can then be sent on to the mten Tn t P7 . nP diate
anv transmission media without fear of compromise. Intermediate
not . concern . Only the rcceipent with another DH-26
and knowledge of the unique code can decipher the message.
So far so good we have identified the three types of station and
given a br^ad outline of their operating characteristics. So J ust
can Se learn from traffic analysis ? Back again to the three types of
stations, I'm afraid.
We are now heading into a black hole - « Sg^Tto'sw
own questions I would probably get a job at GCHQ but I regret 10 s y
that much of the following is calculated guessworK
J 6
MESSAGE STEM&S
Type 1 & 2 - High & Low Traffic Stations. Most readers will be
familiar with the well known suffix numbers e.g. VLB1 VLB2 & VLB3 etc.
It would seem to be the case that these numbers do not, as previously
mentioned, indicate ' no -message ' or 'test transmission' but are in
fact a shorter version of the more common stutter groups
(11111,22222,33333 etc.) used by many other number stations to convey
a fixed response.
Example only - 11111 - We require you to re-transmit your message.
22222 - We have received your incoming message.
33333 - Await further message string.
In the case of E10 stations the number
digit rather than three or five digits.
So what are all the VLB 28 P14Z36B53T20's
These are not now in^ fact believed to
least in the sense of something to be
something along the lines of " Meet Gazab
So what are they ?
VLB 28 P 14
i 1 i i
i i i ;
Station ■ i ;
Callsign • i !
! i I
Purpose 1 i
Unknown !
I 1 —
9119 kH:
20 . 10 -
THE LETTER INDICATES A FREQUENCY
THE NUMERAL INDICATES A TIME
THESE ARE USED TO CREATE A
WINDOW FOR THE RETURN OF THE
BURST MESSAGE TO HQ.
It would seem a strong possibility that these message strings are in
fact operational instructions to field operatives to send burst
transmission messages back to HQ. The system operates a coded format
of the familiar Maritime RTTY set-up that continuously churns out
the frequency (letter code P for example) & time (numeral 14 for
example) used for the transmission of incoming messages from field
oeratives.lt would seem likely that the system is based upon giving
the operatives numerous opportunities to transmit a message back
through an 'open window'. The time/frequency given in code would be
available to the listening station who would attempt to 'catch' the
incoming message.
has been reduced to a single
all about.
be messages as such, not at
decoded. They do not convey
at the Research Station
Z36 B53 T20
I } S 1 >
8341 kHz! I ! i i
20.35 — J ! ! i i
7447 kHz! ! 1
20.55 1 I I
j i
6855 kHz i
21.05
Clearly this would take the form of a very brief burst message which
would be transmitted at low power by the field operative.
High gain antennas, diversity reception and very high quality
receiving equipment situated in an electrically quiet area would
process the weak signals which are then usually automatically
decrypted .
The need to send out long strings of options such as CIO *\3 B22 A.14
P25 R39 Mil would be required in the event that it was not possible
for the field agent to transmit at a particular time. We can presume
that strings of options are sent until such time as an incoming
message has been successfully received.
The only station which seems to 'buck the trend' is SYN which is prone
to sending number strings such as SYN 72 9180500 or SYN 81. The
purpose of these is unknown.
Type 3 - Non-traffic stations. These are even more difficult to
understand. Non traffic stations, as we previously mentioned, are
never heard to send messages as such. Traffic examples consist of the
3 Letter Callsign repeated over and over; this is more often than not
followed by further letters or several numbers.
Actual Examples include NDP-A TMS-22 OEM -4 GBZ-J ZWL-3
NDP-R OEM-8
NDP-X
Some of these call-signs are so rare that literally years can go by
without even a mention. TMS is a good example of this. The station was
noted recently but prior to this the last log was in the late 19dU s.
Clearly Type 3 stations have a totally different purpose to the main
communication systems. It is possible that these agents receive their
main messages via a different communications system, but that they do
send information back to HQ. Although it is pure speculation it is
possible that these rare type three stations are conducting a similar
function in confirming the receipt of incoming information by whatever
means .
It would seem sensible to suggest that such brief information as
TMS-22 or OEM-8 can only indicate a very limited amount of information
and that these are simply status indicators of some kind.
We could speculate forever as to why a Type 3 Station does not send
any traffic or apparent message strings, but we must never be
disheartened - little by little we are putting the pieces of the
jigsaw together and I hope you have found this update on the E10
stations of interest.
I would particularly appeal to all readers for the following.
The earliest reports of any call-sign in this network.
Any callsigns not mentioned in this feature.
Your comments and suggestions.
Sincere thanks to Brian in Sussex, Michael in Newcastle-under-Lyme,
Rahman in London & Clive in Cornwall, Johnathan in Zimbabwe and
Godfrey in South Africa for their assistance with this feature.
Go
a 4
i / V
LOOKING BACK with 'D'
GDR SPY CACHE IN THE SUBERBS - THE CASE OF REINHARD AND SONJA
SHULZE
On August 19 1985, Hans Joachim Tiedge, a West German BtV officer defected to
the GDR. He had been in charge of West Germany's efforts to thwart GDR spying in
the West. His defection heralded a series of arrests on both sides of the Iron Curtain.
In particular, on August 23, Special Branch raided 249 Wave Avenue in Cranford,
Middlesex to arrest a German couple called Schulze who were living in this rented
house near Heathrow airport The man, Reinhard, was a kitchen designer and his wife
called Sonja was a translator. Nobody suspected that they were actually long-term
HVA undercover agents, had been sent to Britain to spy by the GDR and were
recipients of number transmissions in Morse from East Germany....
The man had entered the UK in 1980 as Schultz with a West German passport but
had identity papers in the name of Bryan Waldemar Strunze, The real Strunze had
been born in the UK after the war with an English mother and German father. He
had gone to Erfurt in the GDR and was not heard of again. Then in 1980 Reinhard
Schulze appeared in Britain to rent a holiday fiat for a few months before
disappearing abroad, and then finally coming back to Britain for 4 years. Reinhard
lived in Hounslow as a student of interior design and despite this, appeared to have
plenty of cash as he paid his rent well in advance and even installed a phone in his
fiat. His landlord worried about what a quiet life this 33 year old led who never
received visitors
Richard spent most of his time studying and took up a postal course in interior and
kitchen design, passing with merit in 18 months instead of the normal 2 years.
The school were so impressed that they recommended him to a Kingston company
who were looking for a designer and salesman in 1983. He had by now been joined
by his 36 year old "wife", a female HVA agent, whom he said he had met in Dublin,
Ireland on holiday the previous year. They then married at Hounslow Registry Office.
Sonja Schulze used the Austrian name Ilona Hammer when she came to the IJK and
was doing advanced courses in English before starting work as a translator. They
lived a life Of quiet suburban anonymity and Reinhard's work was regarded as
"superb 11 by his bosses in the kitchen firm as he generated £500,000 of contracts in a
few months^
When their home was raided, the Police spent two days ripping up floorboards and
dismantling furniture. The search continued for a month and the most important
evidence was in the garden shed. In an air freshener were 3 little plastic wallets
containing papers. Two had German words on them set against a list of figures,
presumably to encipher and decipher messages. The third contained a paper with
printed figures on it and these OTPs were shown to the court. Each one was the size
of a large stamp and a five figure code was later found on a note pad in a desk and
this featured in a C\V transmission broadcast from Hast Germany. Two thirds of one
of the pads had been used up and the pad had 50 blocks of 5 digit groups per page.
Recent messages from the GDR picked up by GO IQ were found in code at their
home. A radio receiver was also found and this was said to be able to receive
U
messages irom the GDR. This was a small Sony portable with b(T) display and there
was also a tape recorder I seem to remember. Also found was an escape kit
containing a false British passport for a man and a West German identity card for a
woman as well as a large amount of cash. The kit was in an envelope hidden in the
lining of a bag which the Police slit open.
The Schulzes received regular messages which were impossible to break, but experts
detected a call-sign in the blocks of numerals* Under surveillance they might have
told MI5 much about HVA operations and agents but the defection panic forced
MI5‘s hand. They were the first illegals from the Soviet Bloc to be arrested in this
country since the Portland case in 1961. The question of why they were here
remained unanswered. It was suggested that they were engaged in technical espionage
against companies in the Thames Valley or perhaps were sleepers for wartime use.
Their close proximity to Heathrow suggested that they had a quick escape in mind, as
did the Krogers
No master spy was found and it appeared that the GDR*s plan had not matured and
there were no others in the ring. They had collected maps and information on the
fiight paths to and from Heathrow, Stanstead, Luton, Gatwick and Manchester
airports. There was also an interest in routes and plans for numerous towns in
bngiand. The thrust of their work remained unknown, however. There was no
transmitter but there was a desk top computer owned by Reinhard. It was felt by one
source that the GDR used such equipment to send computerised burst messages by
telephone.
It was found that they had made three trips abroad between 1982 and 1983 and that
cash deposits of several thousands of pounds had been made in bank accounts in
bngiand and Ireland after. each trip. Sonja placed £13,000 into her account yet at that
time she had never worked !
In the Police interview however his legend was shown to be flawed as he did not
know that the real Strunze had a half-brother living in bngiand or other simple details
of the family. Both of them changed their stories simultaneously after they were
arrested. It appeared that they betrayed by a defector to West Germany or by Oleg
Gordievsky who had dealt with illegals as part of his duties. Reinhard was also
charged with making false statements to obtain a passport, and the false application
may have given him away. T hey had to be arrested before they destroyed evidence
and fled, as one GDR suspect had already fled the country the previous year.
Neither of them gave evidence at their trial but they admitted to Police that they had
given false identities to them. She denied having a false Austrian passport and he
denied having an irregular West German identity card. Both of them denied spying
but at their trial they were described as "intelligent, talented and determined" and
received sentences of 10 years each. The Judge recommended that they be deported
at the end of their sentences . He admitted that their real identities, damage done to
the UK and what intelligence, if any, had been sent to the bast was unknown. They
were well-trained and well equipped to pass and receive information secretly. Perhaps
their details are in some Sta-si file which was destroyed or fell into Western hands ?
Maybe Mr 'Hedge could shed light on it as he now lives in retirement in Moscow,
where he move after German reunification. Perhaps they now work for the BND as
they must have finished their sentences by now. They were, and remain to this day ,
an b.NIGMA
f
Numbers Stations are found all over the shortwave spectrum. They emit unusual transmissions
of synthesized voices reading sets of phonetic letters and or numbers. The origin of these stations
is in dispute. Their purpose is unclear. There are many dozens o? different signal types on the air,
each run by different organizations. Some of these organizations should have been closed down
after the ‘end of the cold war\ yet they continue to transmit like clockwork. No one has ever com-
piled a set of Numbers Stations recordings for sale to the public. Until now.
The Conet Project: a quadruple CD covering 25 years of Numbers Station activity, with detailed
iogs, essays, and a difinitive lookup table of all known Numbers Stations, including Morse Numbers
Stations. An invaluable and fascinating resource for all listeners, this is the difinitive reference work
on the mysterious field of Numbers Stations, containing very rare recordings from as early as 1971
and up to date examples of currently operating stations. This is a limited edition release.
Catalogue Number: 59ird tcpl
irdial@irdialsys.win-uk.net ( Irdial-Discs fax: 44+171 +35 1+5858
http://www.ibmpcug.co.uk/1rdial/conet.htm
Irdial-Discs Address: Po Box 424, London SW3 5DY
Mail Order: THESE Records.112 Brook Drive, London SE11 4TQ UK
Telephone: 44+1714-587+5349 Facsimile: 44+171+582+5278
The Quadruple CD costs: £27.50: VISA MASTERCARD and ACCESS accepted. EUROPEAN AIR
MAIL + £2.00 postage & packing. UK & Surface mail ANYWHERE + £1 .50 postage & packing. USA
AIR MAIL + £3.00 postage & packing. ZONE 2 AIR MAIL (JAPAN AUSTRALIA etc.) + £3.75
postage & packing.
Distributed by PHD: Unit 15, Bushell Business Estate, Hithercroft, Wallingford, Oxon 0X10 9DD
Telephone: 44+1491+825+029 Facsimife: 44+1491+826+320
The repost* had beets filtering
lirouqh tor month*. Out suddenly
here *ecmeti to Ik a slight change
it' pattern and emphasis. How
isuch credence should be placed un
hi* particular source? !* there atsy
ndepeildem cornrbortcion? What
unlit nr should you do about it?
Whether it* recruiting spies nr
tuticuts, intellti'ence i.s an issue
gtfrVc inviting you to tackle the
levefopment of' your skills in J
Juiverstty College with a very
pvci.ll aw.ini from Her Majesty - 4
ijiieen* Anniversary I’rue tor
1 tighes and Further F.ducation V/M.
It's a college like no other but it I*
toe that require* qualitie* which a
lot cl' people in fact already posses*.
We're kinking for strong
iMinlulates at two level* of entry.
Undergraduate Level: Your
oarti >g jHimt i* vc.it* ol eapertence
at school. in or looking lor work, ar
home or in the voluntary set tor and
(be intrllrcm.il limit with which to
•ram a ipmd honours degree You’ll
vc tin ippiuotll the ISMie* form many
vlilfereut angle*. You need to l>e an
cm client judge of human nature am
cmueiuie who communicate* well
With people both fare-to-taie ami
in wot. iig. On top of all sin* your
intellig
^ sound common sense, integrity and
tw discernment enable you to find the
most effective way to get your point
acts}** and make firm
i recommendation* for action.
Ifostgraduat* Level; In
addition to the above you wilt have
greater experience of study anil the
world. Your involvement would be
more in managing our MSc or other
Masters. You'll need a proven track
rectml of managing time and talent
and juggling conflicting pri.snne*.
with a clear understanding of she
impact of your decisions.
Exceptional ouwers of
communication and persuasion will
make you adept at talking your way
into situations with the opportunity
for gathering useful information, as
weft a* the re*outrefuliles* to extract
yourself from less promising
circmmrance*. The ability to deal
with ambiguity and nuke decisions
on partial information is essential.
Postgraduate studies anil research
never conform to l ue-jt routine and
neither will yuur work - '»
rlexthlhty I* al«s* essential
I'eople trom J wide range ot
backgrounib find this work uniquely
satisfying: our list melude* maikeirng
exeiutivrs. leaehers, fund raisers,
overseas au! workers, academics
sc it to create waves
of hope.
ence.
and journalists.
You’d enjoy comprehensive
training and development, with foil
involvement to work of national and
international importance
The MirroundinstJ are good,
some would say lavish: you'll be
working in a friendly and supportive I
environment and able to take
advantage ol the excellent localities
at our Liverpool headquarters. In
terms of its constantly changing mix
of challenge and achievement, this is
probably the college for yon.
The college has a firm equal
opportunities policy and we are
keen to recruit people from ethnic |
minorities or with disabilities. You
drfriibt need to be a Uritish emten ;
to apply.
Fof more information or 3
copy of our new 'Friend*'
pro<pt*c(it*, you cjo eo ntact «< at* I
Liverpool Hope University College, j
Hope l‘ark, Liverpool Lift ‘?JD on '
l« 51 291 YHXI or visit our cyber-
cafe at Hope on the Waterfront.
Albert Hock, open seven slays a
week in am * A pm There's m»
nerd to avoid telling your friends
ibout your application. After all.
we're not the secret service. We
believe that intelligence is there to
ANOTHER GREAT ENIGMA COMPETITION
SPOT THE DIFFERENCE.
(Clue-one is MI5 the other Liverpool University College)
The reports had been filtering through fot
months. But suddenly -here seemed to be
» slight change of pattern and emphasis,
f low much credence should be placed ot* this
particular source? fs there any independent
corroboration? What could or should you do
alxiut it?
We re inviting you to tackle these issues
in a career with a verv special part nf I let
Majesty’s Governmet.r - the Security Service.
It’s a career like no other but it is one rhar
requires qualities whii h a lot of people in fact
already possess.
We re looking fur strong candidate! at
two levels of entry.
Level l: Your starting point is 3-1 years
of work experience and a good honours
degree or the intellectual clout with which
you could have gained one had you so chosen.
You Heed the analyiuai ability to mt through
a mass of detail to get at the true picture.
You'll be working in .1 team with people
who approach the is»ur* from many
different angles. You need to be an excellent
■ judge of human nature and someone who
communicates we'! w th people both face-tt
intelligence.
face and in wrong On top of ail this yi
sound common sense, integrity and
discernment enable vou to find the most
effective way to get your point across and
make firm recommendations for action.
Level 2: In addition to the above you will involvement in work of national and
have greater experience of work and the world. international importance The »ilary's gouJ
Your involvement would be more in managing rather than lavish: you'll be working in a
tf>e information gathering process and
responding 10 the other operational needs
of the Service. You'll need a proven track
record of managing people and resources,
and juggling conflicting priorities, with a clear achievement, this is probably the career fur
understanding nf the impact of your decisions.
Exceptional powers of communication and
persuas.on will make you adept a! talking
your wav into situations with thr opportunity with disabilities. However you do need to
for gathering useful information, .11 well as He a British cifuen to apply,
the resourcefulness m extract yourself from
less promising cifi'iiutsuncrs ’ he ability tti
deal with ambiguity and make decisions ixi
partial information is essential. Security
threats never conform to a neat routine am
neither will your work - so iSexibihcv is als
find this work uniquely satisfying: our list
includes marketing executives, {richer*, fund
raisers, overseas aid workers, academics and
journalists. You’d enjoy comprehensive
training and development, with full
friendly and -suppsirtive environment and able
to take advantage of the excellent facilities at
nur central London headquarters. In terms or
its jriynstantly changing mix of chadenge and
The Security Service has a firm equal
opportunities policy and we are keen to
recruit people from ethnic m
i
!c range of background
For more information telephone true •
Knrimmcin Advisor at Austin Knight I unrtol
London W1A H Vs on Uj71 4)4 MlH
{24 hour answering service!. Bat try uni
avrad telling your friends about yuur
application, because discretion is a venous
part of working fur the 5ecurov Service.
Please quote reference A14"'X.
Use it to create waves
and prevent repercussionV:
*
ON THE WATER FRONT
THE SECURITY SERVICE
tM4-